I'm using netfilter to establish a firewall
for my home network, and mostly everything 
is working fine.  But there's one quirk that
I noticed right away:

When I try to access what I'll call apache-B
from the firewall machine, what I get is the 
apache server on the firewall machine instead
(I'll call that apache-A).

Here's my net:

    INET
    |
    | eth1 (1.2.3.4, 1.2.3.5, 1.2.3.6, 1.2.3.7) <-static
    |
    FW (PC-A) (apache-A)
     |
     | eth0 (192.168.2.100)
     |
     ROUTER (192.168.1.1)
      | | |
      | | |
      | | | PC-D (192.168.1.7)
      | |
      | | PC-C (192.168.1.6)
      |
      | PC-B (192.168.1.5)  (apache-B)

I'm nat'ing 1.2.3.5 to 192.168.1.5
            1.2.3.6 to 192.168.1.6
            1.2.3.7 to 192.168.1.7

>From the internet or from PC-B/C/D I can access 
apache-B just fine.  From everywhere I can access 
apache-A as well.  But if I use netscape on the 
FW machine and point it at 1.2.3.5 (apache-B) what 
I get is the local apache server (at 1.2.3.4).

If I point netscape at 192.168.1.5 I do get apache-B.

What gives?  I've tried all kinds of pre & postrouting
rules and searched the archives, but I can't figure 
this out.

A little help?

Thanks

Reply via email to