Redirect http requests

angle2009 · 12-12-2009, 03:41 PM

i wanna redirect every http requests in my network to my http server which is equipped with a simple html page "index.html"

what i did is to check that my httpd service is on and i tested index.html using the browser

and i added a rule in iptables as following :

Code:

iptables -t nat -A PREROUTING -p tcp -s 10.0.0.0/24 --sport 1024:  -d 0/0 --dport 80 -j DNAT --to-dest 10.0.0.5:80

and i tested that scheme from another pc in the network but in vain

so what is the problem !

thanks in advance

nimnull22 · 12-12-2009, 06:27 PM

How about something like this:

iptables -t nat -A PREROUTING -p tcp --dst<GW IP or INET> --dport 80 -j DNAT --to-destination 10.0.0.5:80

Or without destination:

iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 10.0.0.5:80

I'm not sure that it will work, but you can try

Web31337 · 12-12-2009, 06:34 PM

there is also a way to reverse-proxy HTTP requests. like nginx does.
it is the only solution when you want to balance the load between 2+ servers. of course, iptables is perfect for one. just made this note for you, maybe you will need that in future.

angle2009 · 12-13-2009, 01:56 PM

Quote:

Originally Posted by nimnull22

How about something like this:

iptables -t nat -A PREROUTING -p tcp --dst<GW IP or INET> --dport 80 -j DNAT --to-destination 10.0.0.5:80

Or without destination:

iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 10.0.0.5:80

I'm not sure that it will work, but you can try

i tried this rule but actually it didn't work
by the way this machine isn't the server in the network but i enabled ip_forward
and i have a router in my network

should this rule work in that situation ?

nimnull22 · 12-13-2009, 02:15 PM

Do http requests go through that computer?

It should be a GW in that network, otherwise how are you going to catch http requests, and redirect them?

angle2009 · 12-18-2009, 04:52 PM

Quote:

Originally Posted by nimnull22

Do http requests go through that computer?

It should be a GW in that network, otherwise how are you going to catch http requests, and redirect them?

i thought that if i enabled ip_forward parameter so i can catch http requests and redirect them via my iptables
anyway i took the GateWay ip and disconnected the router but the same problem still exits

nimnull22 · 12-18-2009, 05:08 PM

Quote:

Originally Posted by angle2009

i thought that if i enabled ip_forward parameter so i can catch http requests and redirect them via my iptables
anyway i took the GateWay ip and disconnected the router but the same problem still exits

Any computers in the network send their packets to GW, then GW sends them to internet. It is not so easy to replace one with other.