Hi Jon,

I would use port forwarding.  The rule in ipchains looks like this:

/usr/sbin/ipmasqadm portfw -a -p tcp -L InternetIP  Port -R InternalIP Port

/usr/sbin/ipmasqadm portfw -a -p tcp -L xxx.xxx.xxx.xxx 80 -R xxx.xxx.xxx.xxx 80 ( 
this allows http through to an internal machine )

There are some good how to docs on Ipchains at www.linuxdoc.org that can tell you more 
about it.

Sheridan


Jon Greisz wrote:

> I'm a linux newbie.  I've set up a machine with Mandrake 7.1 that I'm about to 
>convert to 7.2.  I want to use it as a firewall between my internal network and my 
>outside T1.  I've got a firewall script set up using IPChains that seems to work 
>pretty well.  I created and used internal network IP addresses.
>
> I've got several machines where I would like certain ports to get through the 
>firewall.  I have assigned internet IP addresses for these machines that I would like 
>to translate to my internal IP's, and reverse it going out.  But only on certain 
>ports.
>
> What is the best approach for this?
>
> Thanks,
>
> Jon Greisz
>
> *********** REPLY SEPARATOR  ***********
>
> On 11/2/00 at 8:45 AM Mark Johnson wrote:
>
> >Yes, this looks like another eruption of off-topic posts...  IMHO, VB should
> >be ported because that is the only way to achieve portability for MS Office
> >documents.  StarOffice is really cool but ultimately not feasible if you are
> >exchanging documents with a group of MS Office folks.  Unfortunately, VB
> >would bring office products closer to managing that feasiblity.
> >Unfortunately, VB is not an elegant language but it suits it's purpose.  Too
> >bad tcl, perl, python, java, or javascript wasn't used for building these
> >dynamic docs.  But those languages present quite a learning curve, this was
> >VB strength.  Also, it enabled MS to lock in a lot of folks to it's
> >proprietary ways of doing things.
>
>   ------------------------------------------------------------------------
> Keep in touch with http://mandrakeforum.com:
> Subscribe the "[EMAIL PROTECTED]" mailing list.
begin:vcard 
n:Hawken;Sheridan
tel;fax:+1.403.253.5580
tel;work:+1.403.253.5531
x-mozilla-html:FALSE
url:www.alterna.com
org:Alterna Technologies Group Inc.;Shared Service Centre
adr:;;Suite 200, 5970 Centre Street SE	;Calgary;Alberta;T2H 0C1;Canada
version:2.1
email;internet:[EMAIL PROTECTED]
title:Technology Analyst
x-mozilla-cpt:;-29760
fn:Sheridan Hawken
end:vcard
Keep in touch with http://mandrakeforum.com: 
Subscribe the "[EMAIL PROTECTED]" mailing list.

Reply via email to