The original request stated that all hostnames resolve to the same IP
address.  In that configuration, ipchains nor iptables can be used to
redirect traffic internally.  When the TCP connections are made, the
kernel doesn't know what hostname the client looked up to reach that
address.  That information won't be available until the connection is
established, and the client sends the HTTP request.

On Mon, 2002-07-08 at 12:31, Mike Burger wrote:
> Actually, it might be able to do so.
> 
> IPtables can work based on name resolution...I have a port opened for a 
> particular service based on a system's hostname...this is done because the 
> system has a dynamic DNS thing going on, and occasionally his IP does 
> change.
> 
> If the firewall system knows to look to an internal name server, it's 
> possible that it could do it based on hostname.
> 
> On 8 Jul 2002, Gordon Messmer wrote:
> 
> > It can't be done based on hostname, though.  No hostname information is
> > transmitted in the packets of an IP stream (except as transport-level
> > data).
> > 
> > Peter~ you might be able to use Apache as a proxy server for your
> > internal servers two.cc.com and three.cc.com.
> > 
> > On Sun, 2002-07-07 at 17:49, Mike Burger wrote:
> > > 
> > > As far as forwarding the other two to an internal IP, yes, IPtables can do 
> > > this for you, via nat.
> > > 
> > > On Sat, 6 Jul 2002, Peter Gosens wrote:
> > > 
> > > > Is it possible to make iptables forward packets based on hostname. 
> > > > 
> > > > I've one.cc.com and two.cc.com three.cc.com pointing to 213.93.43.28 . And I 
>want that traffic with one.cc.com is going to 213.93.43.84. But the two.cc.com and 
>three.cc.com traffic need to be forwarded to an internal network ip (suchs as 
>192.168.100.2).
> > > > 
> > > > Is this possible with iptables. Or do I have to add an loadbalancer or use an 
>proxy. I also thought about using ipv6, but it has an lack of supporting program's.




_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to