Hi Jon,
I would use port forwarding. The rule in ipchains looks like this:
/usr/sbin/ipmasqadm portfw -a -p tcp -L InternetIP Port -R InternalIP Port
/usr/sbin/ipmasqadm portfw -a -p tcp -L xxx.xxx.xxx.xxx 80 -R xxx.xxx.xxx.xxx 80 (
this allows http through to an internal machine )
There are some good how to docs on Ipchains at www.linuxdoc.org that can tell you more
about it.
Sheridan
Jon Greisz wrote:
> I'm a linux newbie. I've set up a machine with Mandrake 7.1 that I'm about to
>convert to 7.2. I want to use it as a firewall between my internal network and my
>outside T1. I've got a firewall script set up using IPChains that seems to work
>pretty well. I created and used internal network IP addresses.
>
> I've got several machines where I would like certain ports to get through the
>firewall. I have assigned internet IP addresses for these machines that I would like
>to translate to my internal IP's, and reverse it going out. But only on certain
>ports.
>
> What is the best approach for this?
>
> Thanks,
>
> Jon Greisz
>
> *** REPLY SEPARATOR ***
>
> On 11/2/00 at 8:45 AM Mark Johnson wrote:
>
> >Yes, this looks like another eruption of off-topic posts... IMHO, VB should
> >be ported because that is the only way to achieve portability for MS Office
> >documents. StarOffice is really cool but ultimately not feasible if you are
> >exchanging documents with a group of MS Office folks. Unfortunately, VB
> >would bring office products closer to managing that feasiblity.
> >Unfortunately, VB is not an elegant language but it suits it's purpose. Too
> >bad tcl, perl, python, java, or javascript wasn't used for building these
> >dynamic docs. But those languages present quite a learning curve, this was
> >VB strength. Also, it enabled MS to lock in a lot of folks to it's
> >proprietary ways of doing things.
>
>
> Keep in touch with http://mandrakeforum.com:
> Subscribe the "[EMAIL PROTECTED]" mailing list.
begin:vcard
n:Hawken;Sheridan
tel;fax:+1.403.253.5580
tel;work:+1.403.253.5531
x-mozilla-html:FALSE
url:www.alterna.com
org:Alterna Technologies Group Inc.;Shared Service Centre
adr:;;Suite 200, 5970 Centre Street SE ;Calgary;Alberta;T2H 0C1;Canada
version:2.1
email;internet:[EMAIL PROTECTED]
title:Technology Analyst
x-mozilla-cpt:;-29760
fn:Sheridan Hawken
end:vcard
Keep in touch with http://mandrakeforum.com:
Subscribe the "[EMAIL PROTECTED]" mailing list.