From: <hamals@infinito.it>
To: netfilter@lists.netfilter.org
Subject: Re: web server in DMZ
Date: Tue, 28 Sep 2004 16:44:36 +0200 [thread overview]
Message-ID: <web-6491079@infinito.it> (raw)
In-Reply-To: <1096381048.2330.47.camel@wolfpack.ljm.dom>
On Tue, 28 Sep 2004 10:17:29 -0400
Jason Opperisano <opie@817west.com> wrote:
>
> are you asking how to connect to the web server from the
>inside by its
> public IP address?
yes
>if so, you just need another DNAT
>rule, probably:
>
> iptables -t nat -A PREROUTING -i $INSIDE_IF -p tcp -d
>$WWW_PUB_IP \
> --dport 80 -j DNAT --to-destination 192.168.1.10
>
> -j
>
> --
> Jason Opperisano <opie@817west.com>
>
>
well I think this is a very good solution, but I can't
understand the following:
hosts in my LAN go in internet with a snat using x.x.x.50
ip address, and everythings is working; my web server is
accessible from outside, then why my inside hosts can't
access to him (with x.x.x.50 IP)? my hosts should see my
web server like any web server on the net....right?
what is wrong in this concept?
_______________________________________
Connessione ed e-mail gratuita da 10 mb
consultabile tramite web e tramite pop.
www.infinito.it vieni a scoprire tutti
i nostri servizi!
http://www.infinito.it/xmail
next prev parent reply other threads:[~2004-09-28 14:44 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-09-28 10:21 web server in DMZ hamals
2004-09-28 10:40 ` John A. Sullivan III
2004-09-28 14:17 ` Jason Opperisano
2004-09-28 14:44 ` hamals [this message]
2004-09-28 15:03 ` Jason Opperisano
2004-09-28 15:14 ` Marek Dohojda
2004-09-29 9:35 ` hamals
2004-09-28 14:27 ` Jose Maria Lopez
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=web-6491079@infinito.it \
--to=hamals@infinito.it \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.