From: "Dick St.Peters" <stpeters@NetHeaven.com>
To: netfilter@lists.netfilter.org
Subject: Re: DNAT and promiscuous mode
Date: Mon, 26 Apr 2004 16:27:07 -0400 [thread overview]
Message-ID: <16525.28827.98470.297348@saint.heaven.net> (raw)
In-Reply-To: <1083001435.1795.8.camel@anduril.intranet.cartel-securite.net>
Cedric Blancher writes:
> Le lun 26/04/2004 à 19:35, Travis Johnson a écrit :
> > I am looking to re-direct my customers that are past due to a
> > different web page.
>
> Then transparent proxying is what you need and do not require
> promiscuous mode.
If the context is local users (such as dialup customers) accessing the
internet, it's not necessary to run a proxy to divert them to a
different web page. I do this with a combination of policy routing
and DNAT.
First, set aside a small block of IP addresses to be assigned only to
overdue customers. RADIUS does this easily. Then route all web
queries from these addresses to the overdue site using policy routing.
I do this in a Cisco because it's there, but most any modern router,
including a Linux box, will do. Then on the overdue site box, DNAT
all packets from those sources to the IP address and port of the
overdue site.
This works like a charm and completely ignores traffic to/from other
users.
--
Dick St.Peters, stpeters@NetHeaven.com
prev parent reply other threads:[~2004-04-26 20:27 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-04-26 17:03 DNAT and promiscuous mode Travis Johnson
2004-04-26 17:30 ` Cedric Blancher
[not found] ` <408D4875.2030407@ida.net>
2004-04-26 17:43 ` Cedric Blancher
[not found] ` <408D4BA2.4030901@ida.net>
2004-04-26 18:02 ` Cedric Blancher
2004-04-26 20:27 ` Dick St.Peters [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=16525.28827.98470.297348@saint.heaven.net \
--to=stpeters@netheaven.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox