On Thu, Sep 27, 2001 at 07:58:58PM +1000, getadog wrote:
> On Thu, Sep 27, 2001 at 06:53:31PM +1000, Jobst Schmalenbach wrote:
> > 
> >                                            | I want to ssh to our EXTERNAL 
>webserver from here
> >                                            | specifying this card address
> >                                  AA         BB V
> >  internet ---- BASTION ------------ THISONE ---------------------
> > 
> > Can I do this???
> 
> Maybe. replace AA and BB with their ip addresses.
> 
> iptables -t nat -I POSTROUTING -d EXTERNAL.webserver.net -s AA \ 
> -p tcp --dport ssh -j SNAT --to BB

I should have said that this rule goes on THISONE.
It changes your source address from AA to BB when
THISONE ssh's to EXTERNAL.webserver.net
Is that what you wanted?



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to