Re: [cobalt-users] Ipchains redirecting IP to a different machine

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Fri, 26 Jul 2002, Josh Kuperman wrote:

> I am using a RaQ XTR with two NICS as a firewall. Right now, the raq
> is only machine which is the only machine directly accessing the
> internet.  I would like to do a few experiments using other
> machines. How do I set up ipchains to direct traffic to another
> machine, preferable from a small subset of locations.
>
> Theser are make believe to save typing: Say I have 1.2.3.1 to 1.2.3.8
> assigne as externand and I'm using a 192.168.1.x internal network. The
> raq is currently 1.2.3.1 and 1.2.3.2 to the outside world with a
> virtual site. The internal interface is 192.168.1.1.  I want to add a
> local machine 192.168.1.2 and have all traffic to 1.2.3.3 go to
> 192.168.1.2 except for what I want to reject or deny with ipchains.
<snip - one subject at a time>

I think you want to use masquerading
Set up ipchains to use masq
The simplest way to get started is use the pmfirewall tool.
Look for it at http://pointman.org
Run the install script and answer "y" for masquerading.
enter the ports/mask.
Then if you have trouble come back with specific questions.

--
Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
http://frontstreetnetworks.com | Website Hosts & SOHO Networks
229 Front Street, Ste.#C, New Haven, CT. 06513 United States
voice +1 203-785-0699 | fax +1 203-785-1787