NetFilter
[Top] [All Lists]

Re: iptables NAT routing issues

To: netfilter@lists.netfilter.org
Subject: Re: iptables NAT routing issues
From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
Date: Thu, 10 May 2007 21:31:10 +0200
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <46432A84.2010409@bserved.nl>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Organization: Plouf !
References: <4640E893.1010206@bserved.nl> <Pine.LNX.4.61.0705090024450.2342@yvahk01.tjqt.qr> <4640FAD0.9050301@plouf.fr.eu.org> <Pine.LNX.4.61.0705090036060.2342@yvahk01.tjqt.qr> <4640FDA9.5000706@bserved.nl> <464101DA.4070102@plouf.fr.eu.org> <46432A84.2010409@bserved.nl>
Sender: netfilter-bounces@lists.netfilter.org
User-agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
Bas Verhoeven a écrit :

Use the outer box as a gateway, if it is in the same network. You do not have to use it as the default gateway for all traffic but at least for the HTTP return traffic. This could be done with iptables and advanced routing on the web server, for instance using the source port 80 to MARK packets or using CONNMARK/connmark.

I wasn't aware of that option, it seems to work fine ;-)

Which option did you choose ?

Thanks.

You're welcome.


<Prev in Thread] Current Thread [Next in Thread>