LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 02-08-2001, 12:02 AM   #1
jrmann1999
Member
 
Registered: Feb 2001
Location: Texas
Distribution: Slackware, Mandrake, LFS
Posts: 306

Rep: Reputation: 30

Here's the situation:

My linux machine is my masq'd firewall for my internal network. I have apache running on port 80(obviously) however I also have a 2000 machine running IIS behind the linux machine. I would like to run it's webserver, and forward the requests sent to my IP(currently only have one) on a certain port(say, 7000) to my 2000 IIS machine. Any clue how I might do this(for those confused, I'll draw out a simple example)

1. Client sends data to port 7000 on Linux machine
2. Linux machine sees request on 7000, forwards to 2000 machine on port 80
3. 2000 machine processes data, then sends back information through the firewall to the linux machine.
4. Cycle repeats.

Thanks
J

 
Old 02-08-2001, 03:02 PM   #2
mjakob
Member
 
Registered: Feb 2001
Posts: 69

Rep: Reputation: 15
First off, you don't mention which distribution or version you're using. I'll assume a newer version of RedHat.

What you want to do is pretty easy. You need to get a hold of a program called ipportfw. This is available as an rpm file for redhat, or you can get the source for other distributions. For even more info on what ipportfw will do, see the following page: http://www.linux.org/docs/ldp/howto/...tml#Forwarders

I can't seem to come up with too much info on it right now. The search on RedHats site doesn't seem to be working. But once you have the ipmasqadm installed, you would add to following lines at the bottom of your ipchains script:

------------------------------------------------------------
#This line flushes any port forwarding rules in effect
/usr/sbin/ipmasqadm portfw -f


# This allows SMTP and POP through to our mail server
/usr/sbin/ipmasqadm portfw -a -P tcp -L 24.x.x.x 25 -R 192.168.1.3 25
/usr/sbin/ipmasqadm portfw -a -P tcp -L 24.x.x.x 110 -R 192.168.1.3 110
------------------------------------------------------------

These lines are directly from my own firewall and allow mail from the rest of the world to be exchanged with the mail server that is behind my firewall.

note- 24.x.x.x is my IP address which has been changed to hide it.

To do what you need to do, you would have a line that looks like this:

/usr/sbin/ipmasqadm portfw -a -P tcp -L 24.x.x.x 7000 -R 192.168.1.50 80

Change 24.x.x.x to the ip address of your linux box, and change 192.168.1.50 to the ip of your Windows box and all traffic on 24.x.x.x:7000 will be moved to port 80 on 192.168.1.50. The nice part of this setup is that the Windows box will see the real IP address of the host connecting, and will therefore log the correct ip addresses instead of the ip address of you linux box.

-Mark
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Iptable and ipchains question itebooks Linux - Software 9 04-07-2004 01:26 AM
Ipchains question jac0b Linux - Networking 3 02-16-2004 06:40 PM
question about ipchains wedgeworth Linux - Software 4 12-31-2003 11:34 AM
ipchains question(s) wushumasterku Linux - General 4 08-22-2002 09:57 AM
question about ipchains wushumasterku Linux - Networking 2 08-21-2002 02:07 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 06:46 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration