RE: [Sheflug] Re: Iptables

[xxxxx [at] xxxxxxxxxxxxxxxxxxx]

>> I'm trying to portforward some services and would like internal
>> clients to use the same address as external clients.
>
>Not going to work; don't even bother. Use a split DNS system to provide
>internal addresses to internal clients and external addresses to
>external clients.

But isn't that even more horrible, running 2 DNS servers each purporting to
be authoritative for mydomain.org but one answering requests for internal
clients and the other for external ones. 

I thought there may be a more elegant solution using iptables..?


#Rewrite packets from lan with ip address destination $EXTIP port 80 to
$PORTFWIP:80
 $IPTABLES -A PREROUTING -t nat -i $INTIF -p tcp -d $EXTIP  --dport 80 \
-j DNAT --to $PORTFWIP:80

Or .. er .. something like that. 

Alan Dawson
___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

  GNU the choice of a complete generation.