Hi Chuck,

my only other option is to do policy routing which i don't think our switch/router ios is right for.. at least then i could target the entier /24 for port 80 requests and translate them to something like 7080 before it gets to the machine and then back out again. messy at best i suspect.

Might it be an option to do so with iptables ?
I use this approach for some servers without any problems - I think that

iptable -t nat -I PREROUTING -d 192.168.168.0/24 --dport 80 -j DNAT --to target:port Should work without reasonable impact on the load...

Oliver
--
Diese Nachricht wurde digital unterschrieben
oliwel's public key: http://www.oliwel.de/oliwel.crt
Basiszertifikat: http://www.ldv.ei.tum.de/page72

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

Reply via email to