All of lore.kernel.org
 help / color / mirror / Atom feed
From: Ivan Gustin <ivan.gustin@pu.t-com.hr>
To: netfilter@lists.netfilter.org
Subject: Rerouting remote users to VPN channel
Date: Mon, 24 Apr 2006 21:23:38 +0200	[thread overview]
Message-ID: <444D25BA.6040505@pu.t-com.hr> (raw)

Hi,

I have one specific routing situation that I still can't handle, so I am 
asking for some help.

I have Linux server, one eth interface and 2 DSL links. One DSL is VPN 
link to another site's Web Intranet application. VPN link itself is 
realised via DSL line and CISCO router. Local users can work with that 
application. Another DSL is Internet gateway for local users, and 
incomming channel for accessing server from outside (there is Siemens 
DSL router).

I want to provide that external remote users can connect to that server 
from Internet and use that Intranet application via another DSL and VPN 
channel.

Route table:
# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use 
Iface
192.168.30.9     192.168.93.65    255.255.255.255 UGH   0      0 
0 eth0
192.168.93.64    0.0.0.0         255.255.255.192 U     0      0        0 
eth0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         192.168.93.122   0.0.0.0         UG    0      0        0 
eth0

...93.64/26 is LAN,
...93.65 is VPN gateway to Intranet Web server on another site,
...93.122 is Internet gateway,
...30.9 is Intranet Web server with The Application on remote site.

Local users can go to Internet and on Intranet app on remote site, and 
that works fine. I need rules that Internet users comming from public IP 
using http://mysite.dyndns.biz:myport through ...93.122 can go to 
http://192.168.30.9:80. I succesfully set forwarding on DSL router so 
incomming packets comes to server on port 'myport' (I can't 
reroute/rewrite packets on DSL router itself).

I tried with one PREROUTING rule, but I can't rewrite both source and 
destination address, so obviusly I need two rules?

Thank anyone for any help,
GI


             reply	other threads:[~2006-04-24 19:23 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-04-24 19:23 Ivan Gustin [this message]
2006-04-25  7:56 ` Rerouting remote users to VPN channel Matt Barclay
2006-04-25  8:21   ` Ivan Gustin

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=444D25BA.6040505@pu.t-com.hr \
    --to=ivan.gustin@pu.t-com.hr \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.