Bas Verhoeven a écrit : Use the outer box as a gateway, if it is in the same network. You do not have to use it as the default gateway for all traffic but at least for the HTTP return traffic. This could be done with iptables and advanced routing on the web server, for instance using the source port 80 to MARK packets or using CONNMARK/connmark.I wasn't aware of that option, it seems to work fine ;-) Which option did you choose ? Thanks. You're welcome. |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: IPset included in distro, Elvir Kuric |
|---|---|
| Next by Date: | Re: Filter a TCP stream based on a text appearing in the initial IP packet of the stream, Jan Engelhardt |
| Previous by Thread: | Re: iptables NAT routing issues, Bas Verhoeven |
| Next by Thread: | Re: iptables NAT routing issues, Bas Verhoeven |
| Indexes: | [Date] [Thread] [Top] [All Lists] |