All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Raul I. Becette" <raulbecette@unp.edu.ar>
To: netfilter@lists.netfilter.org
Subject: Re: multiple webservers behind iptables (SOLVED)
Date: Mon, 14 Feb 2005 09:00:00 -0300	[thread overview]
Message-ID: <421092C0.3070601@unp.edu.ar> (raw)
In-Reply-To: <420A5564.7020000@unp.edu.ar>

Raul I. Becette wrote:

> Hello list
>
> This is my first post.
> I am in charge of a LAN connected to internet through a firewall box 
> PIII 500MHz with iptables 1.2.10.
>
> There are different internal webservers that I don't adminnister and 
> are located physically in different parts of the building.
> There is an internal DNS server which I administer to resolve internal 
> www queries.
>
> My problem is that from the outside I cannot access those webservers 
> when I type www.xxx.unp.edu.ar (xxx being the name of the server).
> My net schema is the following
>
>
>                                     INTERNET
> Mail Relay            Main Web Server             Router
>
>
> -------------------------Firewall--------------------------------
>
>
> POP Server         Proxy         Webserver1      Webserver2
>                                         LAN
>
> My question is how can I use iptables rules to be able to access those 
> servers from the outside.
>
> Any info you need just ask
>
> Thank you for your time
>
Hello list

I solved the problem installing squid on the firewall and configuring it 
as a reverse proxy as described in 
http://squid.visolve.com/squid/reverseproxy.htm

The only line I had to add to my firewall script is in the INPUT chain 
allowing incoming connections on port 80 on the public interface.

Also, every www.xxx.unp.edu.ar on my external DNS server points to my 
firewall public IP.

Thanks everyone for your help

-- 


-----------------------------------------------------------------
Raul I. Becette
E-mail: raulbecette@unp.edu.ar
REPAC, Red Patagonica de  Comunicaciones
Univ. Nac. de la Patagonia San Juan Bosco
Ciudad Universitaria - Km.4.
9000 - Comodoro Rivadavia - Chubut
Tel/Fax : (0297) - 4550073
------------------------------------------------------------------



      parent reply	other threads:[~2005-02-14 12:00 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-02-09 18:24 multiple webservers behind iptables Raul I. Becette
2005-02-09 22:45 ` Jason Opperisano
2005-02-10 14:15 ` Raphael Jacquot
2005-02-14 12:00 ` Raul I. Becette [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=421092C0.3070601@unp.edu.ar \
    --to=raulbecette@unp.edu.ar \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.