Wednesday, April 08, 2009

Re: Kicked me of self! :-/

> So what I need now, is the setup for the IP Tables to get the traffic
> forwarded from eth0/eth1 to the servers in eth2 where I have
>
> eth0 -> smtp/imap -> 192.168.0.196 <mail.tamay-dogan.net>
> http -> 192.168.0.200 <www.tamay-dogan.net> (VServer)
> http:9999 -> 192.168.0.210 <www.debian.tamay-dogan.net> (VServer)
>
> eth2 -> smtp/imap -> 192.168.0.220 <mail.tdwave.net>
> http -> 192.168.0.221 <www.tdwave.net> (VServer)
> http:9999 -> 192.168.0.230 <www.debian.tamay-dogan.net> (VServer)
> pgsql -> 192.168.0.240 <pgsql.private.tamay-dogan.net>

You want to have a look at the DNAT section in the iptables manual.

And to get you up to speed,

iptables -t nat -A PREROUTING \
--destination <PUBIP> -m tcp --destination-port <PUBPORT> \
--jump DNAT --to-destination <PRIVATEIP>:<PRIVATEPORT>

seems to be what you need.


--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

No comments:

Post a Comment