RE: iptables and device aliases - Updated

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> # Generated by iptables-save v1.2.8 on Mon Apr 12 14:40:56 2004
> *nat
> :PREROUTING ACCEPT [2:436]
> :POSTROUTING ACCEPT [2:138]
> :OUTPUT ACCEPT [2:138]
> -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination
> 10.16.6.24:8080
> -A PREROUTING -i eth0 -p tcp -m tcp --dport 443 -j DNAT
> --to-destination 10.16.6.24:8443
> COMMIT
> # Completed on Mon Apr 12 14:40:56 2004

see my previous post on ip aliases for the answer to the alias question.  once you have the ip aliases setup, your NAT rules for the new IP's will need to take into account the original destination IP; like so:

  -A PREROUTING -i eth0 -p tcp -d x.x.x.x --dport 443 \
     -j DNAT --to-destination 10.16.6.24:8443

-j



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux