On Thu, Dec 17, 2009 at 09:43:08AM +0100, Ördögh András wrote:

> majd iptablesben:
> iptables -t nat -A POSTROUTING -s 192.168.1.15 -j DNAT --to-source x.x.x.x
> iptables -t nat -A POSTROUTING -s 192.168.2.15 -j DNAT --to-source y.y.y.y
> iptables -t nat -A POSTROUTING -s 192.168.1.0/255.255.255.0 -j MASQUERADE
> iptables -t nat -A POSTROUTING -s 192.168.2.0/255.255.255.0 -j MASQUERADE
> iptables -t nat -A POSTROUTING -s 192.168.3.0/255.255.255.0 -j MASQUERADE

Majdnem:

iptables -t nat -A PREROUTING -d server1.kulso.ip -j DNAT --to server1.belso.ip
iptables -t nat -A PREROUTING -d server2.kulso.ip -j DNAT --to server2.belso.ip
iptables -t nat -A POSTROUTING -s server1.belso.ip -j SNAT --to server1.kulso.ip
iptables -t nat -A POSTROUTING -s server2.belso.ip -j SNAT --to server2.kulso.ip
iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j SNAT --to harmadik.kulso.ip
iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -j SNAT --to harmadik.kulso.ip
iptables -t nat -A POSTROUTING -s 192.168.3.0/24 -j SNAT --to harmadik.kulso.ip

Ha nem tevedek... Persze ez meg finomithato, pl. ha a belso szervereken
csak nehany portot kell elerni, akkor eleg azokat bekuldeni stb.

Gabor

-- 
     ---------------------------------------------------------
     MTA SZTAKI Computer and Automation Research Institute
                Hungarian Academy of Sciences
     ---------------------------------------------------------
_________________________________________________
linux lista      -      linux@mlf.linux.rulez.org
http://mlf2.linux.rulez.org/mailman/listinfo/linux

válasz