Are you looking for redirect rules? -A PREROUTING -d w.x.y.z -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.16.0.2 You can't have two Web servers redirected through one IP address because there is only one port 80. You'd have to move the other Web server to another port. If you are looking for load balancing, you may need to look elsewhere. Ric -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Gustavo L. P. dos Santos Sent: Friday, June 29, 2007 2:29 PM To: Eljas Alakulppi; netfilter@xxxxxxxxxxxxxxxxxxx Subject: RES: NAT 1:N Maybe I wasn´t clear enought with my question, the two machines are web servers visible on the Internet, and I can´t use MASQUERADE for this. If it was the basics i wouldn´t bother you all. And sorry for the annoyance. Cheers., ------------------------------------------------- ,= ,-_-. =. Gustavo Lima Peres dos Santos (( /)0 0(\_)) Security Analyst - INEP `-'(. .)`-' <gustavo.santos@xxxxxxxxxxx> \_/ Tel.: +55-61-2104-7684/9080 ------------------------------------------------- Esta mensagem eletrônica pode conter informações privilegiadas e/ou confidenciais, portanto fica o seu receptor notificado de que qualquer disseminação, distribuição ou cópia não autorizada é estritamente proibida. Se você recebeu esta mensagem indevidamente ou por engano, por favor, informe este fato ao remetente e a apague de seu computador imediatamente. This e-mail message may contain legally privileged and/or confidential information, therefore, the recipient is hereby notified that any unauthorized dissemination, distribution or copying is strictly prohibited. If you have received this e-mail message inappropriately or accidentally, please notify the sender and delete it from your computer immediately. -----Mensagem original----- De: Eljas Alakulppi [mailto:Buzer@xxxxxxxxx] Enviada em: sexta-feira, 29 de junho de 2007 17:19 Para: Gustavo L. P. dos Santos; netfilter@xxxxxxxxxxxxxxxxxxx Assunto: Re: NAT 1:N First I recomend you to read some basic documentation about iptables (this is covered in about every iptables howto). Anyway, the command is (of course, make sure you have the required modules loaded/compiled in kernel): iptables -t nat -A POSTROUTING -o $EXTIF -j MASQUERADE Gustavo L. P. dos Santos <gustavo.santos@xxxxxxxxxxx> kirjoitti Fri, 29 Jun 2007 23:01:41 +0300: > Hi, > > I´m new on the list, so don´t get mad if my question was posted before. > I need some help to configure a NAT 1:N with iptables. I need some > examples of the syntax to implement this. > > Here is the solution, that i want to implement: I have two machines in > my LAN, that i want to be visible on the Internet using only one valid > IP. > > Sorry for the bad english. > > Cheers, > > ------------------------------------------------- > ,= ,-_-. =. Gustavo Lima Peres dos Santos > (( /)0 0(\_)) Security Analyst - INEP > `-'(. .)`-' <gustavo.santos@xxxxxxxxxxx> > \_/ Tel.: +55-61-2104-7684/9080 > ------------------------------------------------- > > Esta mensagem eletrônica pode conter informações privilegiadas e/ou > confidenciais, portanto fica o seu receptor notificado de que qualquer > disseminação, distribuição ou cópia não autorizada é estritamente > proibida. Se você recebeu esta mensagem indevidamente ou por engano, por > favor, informe este fato ao remetente e a apague de seu computador > imediatamente. > > This e-mail message may contain legally privileged and/or confidential > information, therefore, the recipient is hereby notified that any > unauthorized dissemination, distribution or copying is strictly > prohibited. If you have received this e-mail message inappropriately or > accidentally, please notify the sender and delete it from your computer > immediately. >
