LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-29-2017, 06:47 AM   #1
postcd
Member
 
Registered: Oct 2013
Posts: 527

Rep: Reputation: Disabled
How can i redirect to other IP without "iptables -t NAT" ?


Hello, i was curious which other method/s i can use to redirect incoming connection to different IP? Beside using "iptables -t NAT" kind of rule?

In my case it is Linux CentOS 6 (2.6.3 kernel)
I do not want to redirect all connections, only ones that was made to certain IP and all its ports, protocols. Thank you
 
Old 07-29-2017, 07:54 AM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,685

Rep: Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971
Quote:
Originally Posted by postcd View Post
Hello, i was curious which other method/s i can use to redirect incoming connection to different IP? Beside using "iptables -t NAT" kind of rule?

In my case it is Linux CentOS 6 (2.6.3 kernel) I do not want to redirect all connections, only ones that was made to certain IP and all its ports, protocols. Thank you
Lots of things can do this, but again since you provide no details about your environment (such as what kind of hardware you have in front of your server), or why you don't want an iptables rule, we can't help. You've been asking about iptables for the past two years now, and we've also asked you many, MANY times to provide details when asking questions.

This thread from last year is a good example.
http://www.linuxquestions.org/questi...ed-4175572662/

Again, we are happy to try to help, but you have to provide details and show effort of your own.
 
Old 07-30-2017, 04:33 AM   #3
postcd
Member
 
Registered: Oct 2013
Posts: 527

Original Poster
Rep: Reputation: Disabled
Please anyone else?
 
Old 07-30-2017, 05:30 AM   #4
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Love to. No details tho.
https://opensource.com/life/16/10/ho...ical-questions
Start with define "incoming connection". Singlar, so it must be one service out of 100s.

Tell us about the host's service daemon you wish to "redirect".

Last edited by Habitual; 07-30-2017 at 05:32 AM.
 
1 members found this post helpful.
Old 07-30-2017, 07:56 AM   #5
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,685

Rep: Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971
Quote:
Originally Posted by Habitual View Post
Love to. No details tho.
https://opensource.com/life/16/10/ho...ical-questions
Start with define "incoming connection". Singlar, so it must be one service out of 100s.

Tell us about the host's service daemon you wish to "redirect".
Good luck, Habitual. If past history is any indication, you won't get any details or info, and I already asked the OP for details (as you saw), and only got "Please anyone else?" as a response...as if that, somehow, provided details. The OP has been asking about iptables for at least two years; and you would think that someone with four years experience with something would be able to at least work with that one command easily.

That said, if the OP doesn't want to use iptables, that leaves whatever is in front of that server to do the job. Such things can be done with a load-balancer (depending on type), and even some routers and switches. The Cisco higher-end ones can easily do this. But as you say...no details, so no way of knowing.

Last edited by TB0ne; 07-30-2017 at 08:42 AM.
 
Old 07-30-2017, 08:53 AM   #6
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,671
Blog Entries: 4

Rep: Reputation: 3945Reputation: 3945Reputation: 3945Reputation: 3945Reputation: 3945Reputation: 3945Reputation: 3945Reputation: 3945Reputation: 3945Reputation: 3945Reputation: 3945
Could be a troll-bot.
 
1 members found this post helpful.
Old 07-30-2017, 08:59 AM   #7
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,685

Rep: Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971
Quote:
Originally Posted by sundialsvcs View Post
Could be a troll-bot.
Doubtful; check the OP's posting history.
 
Old 07-30-2017, 04:42 PM   #8
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Quote:
Originally Posted by TB0ne View Post
Good luck, Habitual....you won't get any details or info
I had an idea before I posted.

So, we have 2 elements.
"Other IP" and "incoming connection"...
Hard Line from The Batcave?

Can I buy a vowel?

Last edited by Habitual; 07-30-2017 at 04:45 PM.
 
1 members found this post helpful.
Old 07-31-2017, 01:36 AM   #9
postcd
Member
 
Registered: Oct 2013
Posts: 527

Original Poster
Rep: Reputation: Disabled
Good day, anyone else can help please?
if i need to post some command output, let me know.
 
Old 07-31-2017, 03:38 AM   #10
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
Yes. Post some command output.
 
1 members found this post helpful.
Old 07-31-2017, 06:53 AM   #11
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,685

Rep: Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971
Quote:
Originally Posted by postcd View Post
Good day, anyone else can help please? if i need to post some command output, let me know.
I'm sorry, but are you serious?? You've been asked twice now, very plainly, to give details about things, and you still haven't. And you come back and ask if we need "some command output"??? What command(s) are you going to run and why?? You still haven't told us anything to let us know IF you need to run any 'command'.
 
Old 07-31-2017, 11:09 AM   #12
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Quote:
Originally Posted by postcd View Post
if i need to post some command output, let me know.
No, you shouldn't ask but just post whatever you have right away when you ask a question.
More efficient that way, OK?
 
Old 07-31-2017, 03:33 PM   #13
jefro
Moderator
 
Registered: Mar 2008
Posts: 21,998

Rep: Reputation: 3629Reputation: 3629Reputation: 3629Reputation: 3629Reputation: 3629Reputation: 3629Reputation: 3629Reputation: 3629Reputation: 3629Reputation: 3629Reputation: 3629
There are a number of posts on this thread that are not directly related to the OP's question.
 
2 members found this post helpful.
Old 07-31-2017, 04:04 PM   #14
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,685

Rep: Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971Reputation: 7971
Quote:
Originally Posted by jefro View Post
There are a number of posts on this thread that are not directly related to the OP's question.
While that may be true, we have all asked the OP to provide details; none have been provided, and the OP has a history of doing this. From post #2 they were asked for details and provided with suggestions (such as using switch/router/other hardware). The only replies thus far have been:
  • Please anyone else?
  • Good day, anyone else can help please? if i need to post some command output, let me know.
Not sure where to go here. Asking directly hasn't worked for anyone. The OP said they don't want to use iptables, but won't say why. They don't say what they want to redirect (protocol wise), what version/distro of Linux, what other tools may be available, what networking hardware may be available, etc., etc. Lots of things in play here, but we don't know any of them, and the OP won't say.

What is known is that the OP has been working with iptables for quite some time, and should be well familiar with it by now, so doing a redirect should be trivial. So it's odd they don't want to use iptables.

I understand what you're saying...but please view the OP's posting history first.
 
Old 08-01-2017, 02:27 PM   #15
postcd
Member
 
Registered: Oct 2013
Posts: 527

Original Poster
Rep: Reputation: Disabled
Lightbulb

Quote:
Originally Posted by unSpawn View Post
post whatever you have right away when you ask a question.
I post what i think might be useful. If there is anything else you need to know, please let me know command and i will try.

OFFTOPIC:
PS: I think this time wasting thread can be deleted to save time of future readers. If someone visit it wanting to discover answer to my question, he would waste good amount of time. All above posts could be replaced by single or two commands that i need to run. What a valuable topic it could be. Sorry for OT.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Redirect "/roundcube" to "webmail." for all virtual domains? snowweb Linux - Server 2 08-13-2012 08:58 AM
iptables nat prerouting redirect issue - rhel 5.5 64-bit wischad Linux - Networking 1 11-12-2010 08:29 AM
IPTABLES: interface on "192.168.1.0/24" won't route clients from "10.65.0.0" zivota Linux - Networking 2 06-09-2008 01:35 PM
Iptables problem with "--dport" or "--sport" jmhal Slackware 5 07-03-2007 10:50 AM
I configure NAT and use "services ..." to save it but when I reboot there is no nat bruack Linux - Software 4 09-01-2004 02:38 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:19 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration