ip redirection

ip redirection

[Bruno Nunes]

this is what the dns server does:

 intranet.xxxxxxxxx.com.br --> AAA.AAA.AAA.AAA

 requests to intranet... goes to AAA....A  (the router)

 this is what i want:

 AAA.AAA.AAA.AAA (router) --> BBB.BBB.BBB.BBB (webserver)

 BBB...B is an IP address inside a private network like 192.168.1.x
 AAA...A is a worldwide ip address like 139.82.x.x

 How can I do this redirection with iptables?

 thanks!

 bruno

Re: ip redirection

[Mike Wright]

Bruno Nunes wrote:
> this is what the dns server does:
> 
>  intranet.xxxxxxxxx.com.br --> AAA.AAA.AAA.AAA
> 
>  requests to intranet... goes to AAA....A  (the router)
> 
>  this is what i want:
> 
>  AAA.AAA.AAA.AAA (router) --> BBB.BBB.BBB.BBB (webserver)
> 
>  BBB...B is an IP address inside a private network like 192.168.1.x
>  AAA...A is a worldwide ip address like 139.82.x.x
> 
>  How can I do this redirection with iptables?

It's called Network Address Translation.  (man iptables)

iptables -t nat -A PREROUTING -d AAA.AAA.AAA.AAA \
          -p tcp -m tcp --dport 80 \
          -j DNAT --to-destination BBB.BBB.BBB.BBB

> 
>  thanks!
> 
>  bruno
> 
> 
> 

ip redirection

[Bruno Nunes]

i want all connections incoming from IP1 to be forwarded to the IP2
ip1 is a internet ip
ip2 is a local ip

i only need an ip redirection...so if I use ssh, http or ftp or
anything iptables must route ip1 to ip2 directly

how can i do that with iptables?

thanks

Re: ip redirection

[Rob Sterenborg]

On Tue, March 28, 2006 14:37, Bruno Nunes wrote:
> i want all connections incoming from IP1 to be forwarded to the IP2
> ip1 is a internet ip
> ip2 is a local ip
>
> i only need an ip redirection...so if I use ssh, http or ftp or
> anything iptables must route ip1 to ip2 directly
>
> how can i do that with iptables?

In a previous post "ip redirection and multiport noobish question" (where I
fail to see what the multiport question was) you asked something similar. Did
you actualy look for yourself in the tutorial ?

If you did, you would have been able to construct this :
$ipt -t nat -A PREROUTING -i <if_inet> -d IP1 -j DNAT --to $IP2

However, if you'd ask me then my advice would be not doing this.


Gr,
Rob