From: Daniel Chemko <dchemko@smgtec.com>
To: Ian McBeth <imcbeth@telus.net>
Cc: netfilter@lists.netfilter.org
Subject: Re: forwarding based on hostname
Date: Sun, 03 Aug 2003 13:55:06 -0700 [thread overview]
Message-ID: <3F2D76AA.6040903@smgtec.com> (raw)
In-Reply-To: <000601c35a00$0083bfc0$8c01a8c0@blackice3>
[-- Attachment #1: Type: text/plain, Size: 1305 bytes --]
If you don't change the firewall rules between the two attempts, there
are only a few things that can go wrong:
1. Does the hostname point to the server that the ip address does? Make
sure with a packet sniffer.
2. If you are inside the network trying to connect to 192.168.0.x
directly, it is different from connecting to it through the hostname
address when you are inside the network. Generally for internal
devicesm, you want to point them at an internal DNS server that manages
all the 192.168.0.0/16 addresses. Then, have an external DNS managing
what the world sees.
Iptables does not play nicely doing an interface loop like the following:
HSTA:IFA -> HSTB:IFA -> HSTB:IFB --|
|
HSTC:IFA <- HSTB:IFA <- HSTB:IFB <-|
Ideally, it should look like one of the two following examples:
HSTA:IFA -> HSTB:IFA --|
|
HSTA:IFA <- HSTB:IFA <-|
OR
HSTA:IFA -> HSTC:IFA
The difference here is that the first example needs to loop through an
external interface and then pass back in, but since its source is from
itself, there is invariably problems doing the loopback. I am not sure
if there is a quick-and-dirty fix to this problem. I haven't found one
as of yet.
If this has nothing to do with your problem, then I must say *doh*
[-- Attachment #2: Type: text/html, Size: 2896 bytes --]
next prev parent reply other threads:[~2003-08-03 20:55 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-08-03 8:40 Masquerade stopped working?!?! dummy1
2003-08-03 12:33 ` George Vieira
2003-08-03 16:06 ` dummy1
2003-08-03 16:42 ` Chris Wilson
2003-08-04 7:11 ` dummy1
2003-08-03 17:32 ` Alistair Tonner
2003-08-03 18:12 ` dummy1
2003-08-03 20:09 ` forwarding based on hostname Ian McBeth
2003-08-03 20:20 ` Daniel Chemko
2003-08-03 20:44 ` Ian McBeth
2003-08-03 20:55 ` Daniel Chemko [this message]
-- strict thread matches above, loose matches on Subject: below --
2003-08-03 22:07 George Vieira
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3F2D76AA.6040903@smgtec.com \
--to=dchemko@smgtec.com \
--cc=imcbeth@telus.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox