Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Daniel Chemko <dchemko@smgtec.com>
To: Ian McBeth <imcbeth@telus.net>
Cc: netfilter@lists.netfilter.org
Subject: Re: forwarding based on hostname
Date: Sun, 03 Aug 2003 13:55:06 -0700	[thread overview]
Message-ID: <3F2D76AA.6040903@smgtec.com> (raw)
In-Reply-To: <000601c35a00$0083bfc0$8c01a8c0@blackice3>

[-- Attachment #1: Type: text/plain, Size: 1305 bytes --]

If you don't change the firewall rules between the two attempts, there 
are only a few things that can go wrong:

1. Does the hostname point to the server that the ip address does? Make 
sure with a packet sniffer.
2. If you are inside the network trying to connect to 192.168.0.x 
directly, it is different from connecting to it through the hostname 
address when you are inside the network. Generally for internal 
devicesm, you want to point them at an internal DNS server that manages 
all the 192.168.0.0/16 addresses. Then, have an external DNS managing 
what the world sees.

Iptables does not play nicely doing an interface loop like the following:

HSTA:IFA -> HSTB:IFA -> HSTB:IFB --|
                                   |
HSTC:IFA <- HSTB:IFA <- HSTB:IFB <-|

Ideally, it should look like one of the two following examples:

HSTA:IFA -> HSTB:IFA --|
                       |
HSTA:IFA <- HSTB:IFA <-|

OR

HSTA:IFA -> HSTC:IFA

The difference here is that the first example needs to loop through an 
external interface and then pass back in, but since its source is from 
itself, there is invariably problems doing the loopback. I am not sure 
if there is a quick-and-dirty fix to this problem. I haven't found one 
as of yet.

If this has nothing to do with your problem, then I must say *doh*


[-- Attachment #2: Type: text/html, Size: 2896 bytes --]

  reply	other threads:[~2003-08-03 20:55 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-08-03  8:40 Masquerade stopped working?!?! dummy1
2003-08-03 12:33 ` George Vieira
2003-08-03 16:06   ` dummy1
2003-08-03 16:42     ` Chris Wilson
2003-08-04  7:11       ` dummy1
2003-08-03 17:32     ` Alistair Tonner
2003-08-03 18:12       ` dummy1
2003-08-03 20:09   ` forwarding based on hostname Ian McBeth
2003-08-03 20:20     ` Daniel Chemko
2003-08-03 20:44       ` Ian McBeth
2003-08-03 20:55         ` Daniel Chemko [this message]
  -- strict thread matches above, loose matches on Subject: below --
2003-08-03 22:07 George Vieira

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3F2D76AA.6040903@smgtec.com \
    --to=dchemko@smgtec.com \
    --cc=imcbeth@telus.net \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox