RE: Single IP

[Pmishra@in.safenet-inc.com]

Please see my answer below.

- What is the client using to access your services? A web-browser?
I Open the the portal page and click on the some link then my own service
start and listen the server.
- What "services" are you providing? Websites?
I have two application name is VPX and FNC.
- You can't have more than one application listening on port 80, so how are
you dealing with that issue?
My requirement is OPEN ONE tunnel( between server and client) and all the
data will send via this tunnel. and In server side I check the packet and
forward To appropriate server as per FLAG. 
- why do you stick to 1 IP and 1 port?
Because If client use some firewall the may be he open only single port for
communicate with server.

Thanks
Pradeep


-----Original Message-----
From: Michael Tautschnig [mailto:michael.tautschnig@zt-consulting.com]
Sent: Friday, March 04, 2005 3:10 PM
To: Pmishra@in.safenet-inc.com
Cc: netfilter@lists.netfilter.org
Subject: RE: Single IP



> That's My question,
> I want to use some Option or flag  in socket label so that we can identify
> the socket in server site and forward as per this option.
>
>
> I saw some link
> <http://www.gsp.com/cgi-bin/man.cgi?section=2&topic=getsockopt> (see
> SO_ACCEPTFILTER ) , but I don't identity exactly about setsocketopt and
> getsocketopt.
>
IMHO this is just for local operation on a socket, this has nothing what 
so ever to do with the packets!

Could you please tell as a bit more, what kind of "services" you are 
trying to establish. If it were http-based services, you could always use 
the host-field of the packet - but this has to be done at application 
level, it's not (really) a job of iptables. Actually, there is a 
layer7-filter-project for iptables, but - we just don't know what you are 
trying to do ...

Could you please answer the following questions?

- What is the client using to access your services? A web-browser?
- What "services" are you providing? Websites?
- You can't have more than one application listening on port 80, so how 
are you dealing with that issue?
- why do you stick to 1 IP and 1 port?

Thanks,
Michael