Okay. So let's say it's fred and wilma, sharing the external dns name "external". So I would forward to fred and wilma like so:
iptables -t nat -A PREROUTING -d external -p tcp --dport 80 -j DNAT --to fred iptables -t nat -A PREROUTING -d external -p tcp --dport 8080 -j DNAT --to wilma That makes sense to me. But how do the return packets get rewritten? iptables -t nat -A POSTROUTING -s wilma -j SNAT --to external iptables -t nat -A POSTROUTING -s fred -j SNAT --to external ...seems wrong. Or does it work just fine? (I can't test it right now, unfortuantely....) On Thu, 4 Sep 2003, Lawrence MacIntyre wrote: > So for example, you want one machine (call it fred) to have a web server > on port 80, and another (call it wilma) to have a web server on port > 8080? > > Simply forward port 80 to fred:80 and port 8080 to wilma:80. > Alternately, you can run wilma's webserver on port 8080 and forward port > 8080 to wilma:8080. > > On Thu, 2003-09-04 at 13:05, Ben wrote: > > Hey guys, here's a basic problem I cannot seem to figure out. I've got a > > box doing NAT for some servers and masquarading for a bunch of other > > desktops. The way I have it working, I need to the give my NAT box one > > IP number for the masquarding, and then one additional IP number for each > > server it NATs for. That's a waste; I'd like to give the NAT box one IP > > for all servers, and then forward to the correct server based on port. > > (Yes, that implies none of the servers can run services on the same port, > > and I'm fine with that.) > > > > It seems like this should be a pretty common scenario, but I haven't been > > able to get it working and I haven't seen any examples online. I'm sure > > *somebody* has it working.... would that person please share the wealth? > > > > > > _______________________________________________ > > LARTC mailing list / [EMAIL PROTECTED] > > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ > _______________________________________________ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
