We don't have enough public IP's but we want to have several real
servers for different customers (SSH, Mail, etc.) in the private subnet.
I also plan to switch from Microsoft ISA Server to an
Open-Source-Solution with Linux. The solution can be simply done for
webservers, but we need a solution for several services.
I try to figure out the problem with a simple example:
host1.domain.net IN A 1.2.3.4
host2.domain.net IN A 1.2.3.4
The gateway (1.2.3.4) should dynamicaly open a tunnel to
192.168.0.1 if the query is for host1.domain.net
and to
192.168.0.2 if the query is for host2.domain.net
If you need more details feel free to ask.
Andreas
Sean Cook schrieb:
My question is really what is the purpose? Are these webservers? Do they
have different services? You could use apache with mod_proxy for
webservices...
If you can give a few other details as to what you are trying to accomplish,
I might be able to help a bit more.
Sean
On 18-Aug-2006, Andreas Herrmann wrote:
Hi there,
I want to setup a gateway / firewall solution with Gentoo. The network
has following structure:
Several host (host[1,...,x].domain.net) are defined within the DNS and
all of them have the same A-Record with the IP 1.2.3.4
The gateway is listening on its external network interface with the IP
1.2.3.4 and has an internal interface with a private subnet
(192.168.0.0/24). The hosts (host[1,...,x].) are addressed in this subnet.
How can it be solved, that the gateway opens a tunnel to the special
host in the private subnet (let.s say 192.168.0.3) if there is a query
for host3.domain.net?
In my opinion this cannot be done because the client queries the DNS and
simply opens the connection to the IP 1.2.3.4 and the gateway has now
hints how to decide to which internal host the tunnel should be opened.
But this setup is possible because Microsoft ISA Server exactly does
this job!
I have no idea how to solve this. First idea was a kernel bridge between
the interfaces.
Do you have any hints for me?
Thanks a lot!
Andreas
--
[email protected] mailing list
--
[email protected] mailing list
