On Mon, Dec 12, 2005 at 04:44:05PM -0500, Peter Landry wrote: > That aside, the only thing that I haven't been able to migrate yet is > ISA's ability to redirect web requests coming in on the same IP to > different machines based on the host name. IE- www.a.com (IP > 123.123.0.1) gets redirected to the internal IP 192.168.0.1 while > www.b.com (also IP 123.123.0.1) gets redirected to the internal IP > 192.168.0.2.
> I'm thinking that I can't do it. In that case, my options seem to be 1) > use different external IP's for each website, and redirect to different > internal servers based on IP 2) redirect all web traffic to the legacy > ISA system, which will then redirect based on hostname. I'm hesitant to > use up all our IPs for option 1, but I'm thinking option 2 is even > worse... Are there any options I haven't thought of? You are right in that pf doesn't do http. You can, however, use pf to transparently send traffic to a proxy server on localhost or elsewhere - and a good proxy will do what you want. (This is called a reverse proxy.) Joachim