NetFilter
[Top] [All Lists]

RE: port forwarding through localhost

To: <netfilter@lists.netfilter.org>
Subject: RE: port forwarding through localhost
From: "Andy B." <globi@hot.lu>
Date: Wed, 31 Jan 2007 10:09:58 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <005401c744a8$7a804690$c84f949b@nasw.ds.army.mil>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
References: <000001c7419d$0bab38f0$0d01a8c0@Mobi> <005401c744a8$7a804690$c84f949b@nasw.ds.army.mil>
Sender: netfilter-bounces@lists.netfilter.org
Thread-index: AcdBnHjBzcIhMaFMTgizuSrq7XFE9gAAA+4gAML5BsAAG6mUIA==
Yes, I know that I should have used some FQDN instead of localhost, but the
cirumstances that once were have changed a lot - I will do better next time
:-)

-j REDIRECT is imho just for redirecting towards the same host (localhost to
localhost), so of no use.

As a quick fix, I am now using rinetd which does the trick, but the overhead
is driving the server load up :-/

Andy

-----Original Message-----
From: Michael P. Brininstool [mailto:mikepb@hoplite.org] 
Sent: Tuesday, January 30, 2007 20:54
To: 'Andy B.'; netfilter@lists.netfilter.org
Subject: RE: port forwarding through localhost

I know this is a little late, but when doing services like this, it has
proved helpful in the past to have the customers use a FQDN
(full-qualified-domain-name) instead of an IP.  For example, I setup the
following: imap.domain.com, smtp.domain.com, www.domain.com,
mail.domain.com, mysql.domain.com, proxy.domain.com, ftp.domain.com, etc,
even if they are all on the same machine.  That way, as services need to be
split off onto their own machine, a simple DNS change moves the load.

In the manner of helping in your current situation, isn't there a -j
REDIRECT table?

--
Michael P. Brininstool




<Prev in Thread] Current Thread [Next in Thread>