From mboxrd@z Thu Jan 1 00:00:00 1970 From: Kirk Wallace Subject: Re: Layer (5,6,7) based NAT Date: Sun, 29 Apr 2007 09:33:59 -0700 Message-ID: <1177864439.3828.235.camel@ws1.walco02.com> References: <44301.80.177.104.4.1177854143.squirrel@webmail.modwest.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <44301.80.177.104.4.1177854143.squirrel@webmail.modwest.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org Adam I was looking at this to solve another problem, but it may help you solve yours? http://l7-filter.sourceforge.net/ Kirk ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ On Sun, 2007-04-29 at 07:42 -0600, Adam wrote: > I am wondering weather this is possible. I have one port and one public IP > address lets say: > > 34.123.22.33:5615 > > If I connect using SSH I want to DNAT to port 22, if I connect using SSL I > want to DNAT to port 443, if I connect using HTTP I want to DNAT to port > 80. > > If this kind of upper layer protocol determination possible? If so, is > netfiter the application to do it? > > > >