LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (http://www.linuxquestions.org/questions/linux-security-4/)
-   -   firewall application needed for gateway server (http://www.linuxquestions.org/questions/linux-security-4/firewall-application-needed-for-gateway-server-898044/)

nicolasdiogo 08-18-2011 06:26 AM

firewall application needed for gateway server
 
hello


i have this idea in my head - but i am not sure if the concept is correct neither if there is a tool that does the job

i have a small network that holds servers for 2 domains:
dev.company.net
company.com

each of these are in their own internal subnet:
dev.company.net => 10.2.1.0/24
company.com => 10.10.0.0/24

what i would like to be able to do: is to redirect the internet traffic through our gateway (linux) accordingly.

so if a user is looking for a webserver on dev.company.net;
just as well a VPN client will.

at the same time similar traffic will exist for the other domain.

so can i do that? i have used webmin in the past to setup iptables but i can not recall on how to setup iptables to redirect traffic depending on which domain is requested - only by their port/services.

please send your suggestions in.

thanks guys,


Nicolas

Noway2 08-18-2011 07:51 AM

It sounds like the idea will work and I believe you are looking for router functionality, which will be based upon IP address, not name. If you can get the routing to work per IP address using the NAT functions of iptables you are well on your way. The second part, based upon domain, will be a function of your DNS and zones, rather than iptables. You will need to configure the authoritative DNS for your LAN to resolve these names into the appropriate address. Then with the routing configured properly, you should be able to point your browser to either site and go to the correct one.

nicolasdiogo 08-18-2011 11:11 AM

thanks Noway2

i though that much myself. but i thought that should have been a product out there that would do this.

anyone else knows of a product that would do this?


All times are GMT -5. The time now is 07:44 PM.