On Mon, Nov 08, 1999 at 07:09:21PM +0100, Alain Ganuchaud wrote:
> Hi guys,
>
>
> Below is the configuration I want to set up:
>
>
> WWW-------> Firewall <-------> http1 <--------> http2
> ___public___|_______________private_________________
>
> Firewall with Redhat6.X , ipchains & ipmasqadm.
>
>
> WWW requests will come through Firewall to my http1 (=linux portal) then
> some
> requests could be redirected to http2 (=NT), if data is on it. So, I think I
> am facing a problem because I have to redirect to 2 different ip adresses
> (port80) to be successful.
>
> I read linux-net archives & ipmasqadm man pages but still don't figure out
> how
> it could work. I guess I have to use 'ipmasqadm mfw' but I don't
> understand if I can setup such configuration and how to do it.
mfw module makes sense for:
* (alot-of) load balancing
* fine grain selection rules (from ipchains).
>
> Or maybe, I can configure a different port for http2; in this case I can
> redirect
> both http requests by 'ipmasqadm portfw'; but I'm not sure it will work.
Yap. Given that the only selection criteria is the port, you can
forward eg. fw:80->http1:80, fw:81->http2:80 with 2 portfw rules:
# ipmasqadm -A portfw -a -P tcp -L fwall_ip 80 -R http1 80
# ipmasqadm -A portfw -a -P tcp -L fwall_ip 81 -R http2 80
Of course, you must arrange your URLs to take care of this.
Regards
--
-- Juanjo http://juanjox.kernelnotes.org/
... because there IS an OS that CAN follow your power
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
