RE: [cobalt-users] Ipchains redirecting IP to a different machine

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Fri, 26 Jul 2002, Frederic Badel [Abanys-Concept] wrote:

> >
> > Theser are make believe to save typing: Say I have 1.2.3.1 to 1.2.3.8
> > assigne as externand and I'm using a 192.168.1.x internal network. The
> > raq is currently 1.2.3.1 and 1.2.3.2 to the outside world with a
> > virtual site. The internal interface is 192.168.1.1.  I want to add a
> > local machine 192.168.1.2 and have all traffic to 1.2.3.3 go to
> > 192.168.1.2 except for what I want to reject or deny with ipchains.
>
> hello,
>
> we used to have a mail server in a private network (with a private ip)...
> we finally used rinetd (http://www.boutell.com/rinetd/) on the firewall to
> redirect the traffic to the mail server...
>
> we also tried with ipchains, without any success ... :(
>
Ohhh! If that is what you wnat, you need port forwarding.
"Port Forwarding is only called within masquerading functions so it
fits inside the same IPCHAINS rules. Masquerading is an extension to
IP forwarding. Therefore, ipportfw only sees a packet if it fits
both the input and masquerading rule sets."

http://www.thelinuxreview.com/howto/IP-MASQ/x1525.htm
but probably start here
http://www.thelinuxreview.com/howto/IP-MASQ/book1.htm

--
Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
http://frontstreetnetworks.com | Website Hosts & SOHO Networks
229 Front Street, Ste.#C, New Haven, CT. 06513 United States
voice +1 203-785-0699 | fax +1 203-785-1787