/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
Hi,
There're a lot of questions here, but I'll start with #5. Use the following commands:
'ipmasqadm portfw -a -P tcp -L 216.5.112.170 80 -R 208.155.225.124 80',
'ipmasqadm portfw -a -P tcp -L 216.5.112.170 25 -R 208.155.225.124 25',
'ipmasqadm portfw -a -P tcp -L 216.5.112.170 80 -R 208.155.225.124 80',
'ipmasqadm portfw -a -P tcp -L 216.5.112.170 110 -R 208.155.225.124 110',
'ipmasqadm portfw -a -P tcp -L 216.5.112.170 23 -R 208.155.225.98 23'.
I think that will do it. (I'm writing from memory).
Question #4:
You probably want to masquerade your internal IPs, but first you need to put your main
machine on the
same subnet as the others by adding another two IP aliases (I imagine you have two
subnets because the
255.255.255.224 netmask allows 30 hosts per subnet) which are part of your client
subnets. Then you
can use something like:
'ipchains -A forward -s 208.155.225.96/27 -j MASQ'.
For a complete MASQ setup look at http://members.home.net/ipmasq.
Joao
Dennis MV wrote:
> /* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
>
> Hi,
>
> I tried looking at the How_To that's listed on the page
> http://home.indyramp.com/mirrors/ipmasq/ipmasq-HOWTO.html but it said Error
> 404 .. not found 5/30/2000 12:56 (GMT -0500)
>
> So I have the following question:
> 1. I have a MAIN machine that is connected directly to the Internet and has
> 2 PUBLIC IPs 216.5.112.170/255.255.255.0 AND 216.5.112.174/255.255.255.0
> (IP Aliasing)
> ------------------------------------------------
> 2. I have 32 internal client machines that are connected to the MAIN
> machine.
> They have IPs ranging from 208.155.225.97 to 208.155.225.128
> Their netmask is 255.255.255.224
> (In case you noticed and you probably did, those are not RFC private
> addresses, and the net mask is not standard either but that's how the
> network is set up here .. for now. Later we plan to change those, but
> that's another story.)
> ------------------------------------------------
> 3. Two of the machines mentioned in #2 are actually servers:
> 3a. TELNET machine Internal IP 208.155.225.98/255.255.255.224
> 3b. HTTP machine Internal IP 208.155.225.124/255.255.255.224
> (3b also acts as POP3 and SMTP)
> ------------------------------------------------
> ------------------------------------------------
> Ok now my questions are:
> 4. How do I share the MAIN's machine (look at #1) Internet connection with
> all the other 32 clients (#2).
> ------------------------------------------------
> 5. How do I redirect connections from the outside to the actual servers:
> When somebody from the outside connects to:
> 216.5.112.170:80 I want it to go to 208.155.225.124:80 and from
> 216.5.112.170:25 I want it to go to 208.155.225.124:25 and from
> 216.5.112.170:110 I want it to go to 208.155.225.124:110 and from
> 216.5.112.174:23 I want it to go to 208.155.225.98:23
> AND I want them to redirect the connections back from the internal hosts to
> the outside
> and block all the other ports and connections from the outside.
>
> Can that be done ?
>
> I looked through some faqs/howtos/docs/man/info about IPchains,
> ipmasqadm/mfw/other but so far no luck in getting what's going on and where
> to start ...
>
> any comments/commands/faq/howtos/advices/other would be appreciated.
>
> thanks a lot,
> Dennis
>
> ________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> _______________________________________________
> Masq maillist - [EMAIL PROTECTED]
> Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
>UNSUBSCRIBING!
> or email to [EMAIL PROTECTED]
>
> PLEASE read the HOWTO and search the archives before posting.
> You can start your search at http://www.indyramp.com/masq/
> Please keep general linux/unix/pc/internet questions off the list.
--
-----------------------------------------------------------------
Fabrica de Ideias
sbs - ed. empire center - sala 109 - cep 70070-904 - brasilia-df
tel: (61) 321 1357
fax: (61) 321 6096
[EMAIL PROTECTED]
-----------------------------------------------------------------
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
