Newbie firewall question

spank · 01-08-2008, 08:03 AM

Code:

iptables -t nat -A PREROUTING -i eth0 -p tcp --destination-port 80 -j DNAT --to-destination 10.5.0.1

I just want to redirect all the http trafic to any address to 10.5.0.1:80 server.

If i type www.google.com to go to 10.5.0.1

Sorry for the dumb question

peter_robb · 01-09-2008, 08:14 AM

That'd work..
It's like a rule for using a network proxy server.

Just like all iptables rules, you need to place it in the correct order in the list.

Remember that http uses headers to name the webpage url, so the remote end needs to recognise everything it is given in a url..

helptonewbie · 01-09-2008, 11:21 AM

It depends on the reasons for doing this but you may want to do the same to port 443 being https, although still not all web-servers do run on 80 or 443 but that would catch most web traffic