From: Grant Taylor <gtaylor@riverviewtech.net>
To: Mail List - Netfilter <netfilter@vger.kernel.org>
Subject: Re: routing all HTTP requests to my own web server
Date: Fri, 17 Oct 2008 13:32:56 -0500 [thread overview]
Message-ID: <48F8DA58.7090202@riverviewtech.net> (raw)
In-Reply-To: <a0a0d59c0810171129h17c16603vf1d323b71d4a2a02@mail.gmail.com>
On 10/17/08 13:29, Jeremy Pullicino wrote:
> Thanks Grant - I understand exactly what you mean.
*nod*
> To solve the TCP Triangle problem I should probably add this rule
> (192.168.11.1 is the local machine):
>
> iptables –t nat –A POSTROUTING -p tcp --sport 80 –j SNAT –-to
> 192.168.11.1
>
> Would that be correct?
I would not use an "sport" match. I would match on "dport". Remember
that client TCP connections can come from any port between 1024 and
65535. However seeing as how it is going to your proxy server on a
specific port I'd match on that. I'd probably also match on your proxy
server's destination IP.
> Thanks for your advice.
You are welcome.
prev parent reply other threads:[~2008-10-17 18:32 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-10-17 17:40 routing all HTTP requests to my own web server Jeremy Pullicino
2008-10-17 17:57 ` Grant Taylor
2008-10-17 18:29 ` Jeremy Pullicino
2008-10-17 18:32 ` Grant Taylor [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=48F8DA58.7090202@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.