Greetings all,

I am using iptables to do port redirection for a host running a webserver on
a 192.168 subnet.  Outside, everything works wonderfully, inside however, it
does not.

Here's the rule I'm using:

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to
192.168.1.107

When someone on the 192.168 subnet tries to use the name (which resolves to
eth0 of the box running the above rule)  we get "server refused connection"
message, as we are trying to access port 80 on that box and not getting
forwarded since we are coming in on eth1.

I thought that it was due to the PREROUTING and have tried variations on
using POSTROUTING with REDIRECT, SNAT & MASQUERADE

So far, nothing has worked.

Any advice other than using internal DNS servers?  We are a little short on
hardware and I don't expect to get machines to run internal DNS servers on
for a couple of months.  So for now the people who need to work on these
machines need to remember to use one address when they are in the office,
and another when they are outside.  I'd just like to make life a little
easier for them.

TIA



_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list

Reply via email to