That's kind of tricky.  That legit IP has to be on the same interface as
the rest of that network or it won't work.

What network is eth0 on?

What kind of hardware is your router?


On Mon, 22 Oct 2001, John Hunter wrote:

>
> Ok,
>
> Thanks for the help thus far.  I'm making progress.
>
> I decided to go with my own domain name 'paradise.lost' (my advisor is
> John Milton).
>
> Here's the next problem.  Behind my firewall, I have machines in the
> 192.168.1.* address range.  These are my paradise.lost machines.  I am
> using iptables with NAT on my router so these machines can talk to the
> outside world.  This appears to be working fine.
>
> My router is a dual homed host with eth0 pointing to the internet and
> eth1 pointing to the LAN.
>
> In addition to the 192.168 machines on the LAN, I also have a machine
> video.bsd.uchicago.edu with a valid IP 128.135.97.144 behind the
> firewall (ie, it connects to eth1).  This is my bastion host, and will
> run the http server, mail server and that kind of stuff.  From the
> bastion host I can talk to my router and vice versa.
>
> My question is: how do I get the outside world to see this machine.
>
> I don't know if I need to be administering both domains
> (bsd.uchicago.edu and paradise.lost) with my domain name service on
> the router.  I don't see why I would need to do this because
> university name server correctly serves the IP address of
> video.bsd.uchicago.edu.
>
> My fundamental question is: how does the outside world know that it
> has to come through my router to get to video.bsd.uchicago.edu?  Is
> video broadcasting and my router forwards that broadcast?
>
> Confused,
> JDH
>

_______________________________________________
<majcher> i forsee a successful porn career ahead of you.

Reply via email to