Le lun 26/07/2004 à 09:54, Andreas Sachs a écrit : > i can bind mysql to one or to all ip-addresses. so it's not possible to bind > mysql 3 to all ip-addresses without ip-b. Why don't you bind MySQL to 127.0.0.1, using a dedicated port for each MySQL version (127.0.0.1:A for MySQL 3 and 127.0.0.1:B for MySQL 4) and then use REDIRECT target to send packets to proper port : iptables -t nat -A PREROUTING --tcp -d $IPA --dport $MYSQL \ -j REDIRECT --to-ports $PORT_A iptables -t nat -A PREROUTING --tcp -d $IPB --dport $MYSQL \ -j REDIRECT --to-ports $PORT_B [etc.] By the way, I tested it for you. I binded my SSHd to 127.0.0.1 only and then issued : iptables -t nat -A OUTPUT -p tcp -d $EXT_IP --dport 22 \ -j REDIRECT Then doing a ssh my external IP from the box itself works like a charm. -- http://www.netexit.com/~sid/ PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE >> Hi! I'm your friendly neighbourhood signature virus. >> Copy me to your signature file and help me spread!