On Wednesday 07 July 2004 12:51, Svavar Örn Eysteinsson wrote: > Hi everybody. > > I have one question about DNAT. > > I have a computer foo.com on an ipaddress xxx.xxx.xxx.xxx > > Is there any way for me to DNAT all traffic with destination to foo.com > to another server out-of-town, e.g. computer foobar.com with > zzz.zzz.zzz.zzz that > is not on my public network.? Yes, basically using Computer A to be an IP-level proxy. Note that the source address as seen by Computer B will always be that of Computer A. If this is not a problem, you can use: $IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -d xxx.xxx.xxx.xxx -j DNAT --to zzz.zzz.zzz.zzz $IPTABLES -A FORWARD -p tcp --dport 80 -d xxx.xxx.xxx.xxx j ACCEPT $IPTABLES -t nat -A POSTROUTING -p tcp --dport 80 -d zzz.zzz.zzz.zzz -j SNAT --to xxx.xxx.xxx.xxx Drop the '--dport 80' bits if you want all traffic, not just HTTP to be proxied. Cheers, Gavin.
