dnat to multiple destination

dnat to multiple destination

[=?unknown-8bit?b?sLAg/uP+4yDf6nL74vFnILCw?=]

hi there,

recently i read iptables man page,
in the DNAT part :
You  can  add  several --to-destination options.  If
you specify more than
one destination address, either via an address range
or multiple --to-des­
tination  options,  a simple round-robin (one after
another in cycle) load
balancing takes place between these adresses.

in my mind, it sounds like:
iptables -A PREROUTING -s xxx.xxx.xxx.xxx -p tcp
--dport 80 -j DNAT --to-destination aaa.aaa.aaa.aaa
--to-destination bbb.bbb.bbb.bbb

but it says invalid arguments.
which part was wrong ?

cheers,
Agung


		
__________________________________ 
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com

Re: dnat to multiple destination

[Mariusz Kruk]

°° þãþã ßêrûâñg °° napisał(a):
> iptables -A PREROUTING -s xxx.xxx.xxx.xxx -p tcp
> --dport 80 -j DNAT --to-destination aaa.aaa.aaa.aaa
> --to-destination bbb.bbb.bbb.bbb
> 
> but it says invalid arguments.
> which part was wrong ?

try [...]-p tcp -m tcp --dport 80[...]

Re: dnat to multiple destination

[Jörg Harmuth]

°° þãþã ßêrûâñg °° wrote:
> hi there,
> 
> recently i read iptables man page,
> in the DNAT part :
> You  can  add  several --to-destination options.  If
> you specify more than
> one destination address, either via an address range
> or multiple --to-des­
> tination  options,  a simple round-robin (one after
> another in cycle) load
> balancing takes place between these adresses.
> 
> in my mind, it sounds like:
> iptables -A PREROUTING -s xxx.xxx.xxx.xxx -p tcp
> --dport 80 -j DNAT --to-destination aaa.aaa.aaa.aaa
> --to-destination bbb.bbb.bbb.bbb


Try adding -t nat

dnat to multiple destination *correction*

[=?unknown-8bit?b?sLAg/uP+4yDf6nL74vFnILCw?=]

hi there,

recently i read iptables man page,
in the DNAT part :
You  can  add  several --to-destination options.  If
you specify more than
one destination address, either via an address range
or multiple --to-des­tination  options,  a simple
round-robin (one after another in cycle) load
balancing takes place between these adresses.
 
in my mind, it sounds like:
iptables -t nat -A PREROUTING -s xxx.xxx.xxx.xxx -p
tcp
--dport 80 -j DNAT --to-destination aaa.aaa.aaa.aaa
--to-destination bbb.bbb.bbb.bbb

but it says invalid arguments.
which part was wrong ?

cheers,
Agung


		
__________________________________ 
Start your day with Yahoo! - Make it your home page! 
http://www.yahoo.com/r/hs

Re: dnat to multiple destination

[KOVACS Krisztian]

  Hi,

On Wednesday 26 October 2005 16.02, °° þãþã ßêrûâñg °° wrote:
> recently i read iptables man page,
> in the DNAT part :
> You  can  add  several --to-destination options.  If
> you specify more than
> one destination address, either via an address range
> or multiple --to-des­
> tination  options,  a simple round-robin (one after
> another in cycle) load
> balancing takes place between these adresses.
>
> in my mind, it sounds like:
> iptables -A PREROUTING -s xxx.xxx.xxx.xxx -p tcp
> --dport 80 -j DNAT --to-destination aaa.aaa.aaa.aaa
> --to-destination bbb.bbb.bbb.bbb
>
> but it says invalid arguments.
> which part was wrong ?

  Unfortunately that possibility was removed when restructuring the 
Linux NAT for the 2.6.11 Linux release. Should work with older kernels, 
or you can work it around by using two DNAT rules and the 'random' 
match from patch-o-matic-ng. Ugly, but it should work that way.
 
http://www.netfilter.org/documentation/HOWTO//netfilter-extensions-HOWTO-3.html#ss3.14

-- 
 Regards,
  Krisztian Kovacs

Re: dnat to multiple destination

[=?unknown-8bit?b?sLAg/uP+4yDf6nL74vFnILCw?=]

  Unfortunately that possibility was removed when
> restructuring the 
> Linux NAT for the 2.6.11 Linux release. Should work
> with older kernels, 
> or you can work it around by using two DNAT rules
> and the 'random' 
> match from patch-o-matic-ng. Ugly, but it should
> work that way.
>  
>
http://www.netfilter.org/documentation/HOWTO//netfilter-extensions-HOWTO-3.html#ss3.14
> 
> -- 
>  Regards,
>   Krisztian Kovacs
> 

ok thanks :-)

@Jörg
i've correct my post, i've use -t nat just miss type
when i write my post. thx anyway :-)


		
__________________________________ 
Start your day with Yahoo! - Make it your home page! 
http://www.yahoo.com/r/hs

Re: dnat to multiple destination

[Henrik Nordstrom]

On Wed, 26 Oct 2005, KOVACS Krisztian wrote:

>  Unfortunately that possibility was removed when restructuring the
> Linux NAT for the 2.6.11 Linux release. Should work with older kernels,

Was repordedly broken in older kernels...

Regards
Henrik