port forwaring from localhost to inet

Oran G jihad at redwhitearmy.com
Sat Jun 4 18:59:23 CEST 2005


hello,

I want to forward local requests to a mashine on the network.

I have a few hundred cgi scripts running on the webserver and using a 
mysql-server on the same host. now i have set up a separate 
mysql-linux-box and since it would be to much work to rewrite all the 
scripts, im trying to redirect all trafic from localhost:3306 to 
somepublicip:3306.

i used:
iptables -t nat -A PREROUTING -p tcp --dport 3306 -j DNAT --to 195.x.x.x

which works well form inet to inet but if I put '-o lo' to the line it 
doesnt.

i understand that this could be becouse the source of the packets would 
also require some rewriting, but i dont know how to do this. is there a 
way to solve this with iptables or shoud i try it with ssh-tunels?

thax, oran g



More information about the netfilter mailing list