Multiple Source IP Addresses
Dennis O. Aliev
daliev at etecom.com
Fri Mar 11 20:40:10 CET 2005
Thank you for reply.
What you suggesting will take care of routing incomming packets (from internet) to web server. In my scenario, I have a bot that parses sites and so the packets are coming from webserver to internet and source addresses must be different to load balance between internet connections.
Dennis O. Aliev
On Fri, 11 Mar 2005 09:21:40 +0100
"Baake, Matthias" <m.baake at porta.de> wrote:
> If i understood it the right way you want to map an internal machine (e.g. Webserver) to an external address.
> Then you have to make a Rule into NAT Prerouting to redirect specific Traffic to the internal machine.
> IPTABLES -t nat -A PREROUTING -i $EXT_IF -d $Your_ext_ip -j DNAT --to-destination $IP_OF_YOUR_INTERNAL_WEBSERVER
> The filtering for this map you can still do in the filter table. Like your rule you already posted.
> This way your Internal Webserver should be reachable from the Internet.
> /matthias baake
> -----Original Message-----
> From: netfilter-bounces at lists.netfilter.org
> [mailto:netfilter-bounces at lists.netfilter.org]On Behalf Of Dennis O.
> Sent: Friday, March 11, 2005 4:50 AM
> To: netfilter at lists.netfilter.org
> Cc: sergey at etecom.com; daliev at etecom.com
> Subject: Multiple Source IP Addresses
> Good evening,
> Is there a way to send traffic from host behind IPTables firewall using different external source IP addresses that are assigned to firewall on the external interface?
> Host behind firewall has single IP address (192.168.1.94) and making http based requests to internet.
> Firewall has following rules to make it work:
> iptables -t filter -A forward -o eth0 -p tcp -s 192.168.1.94 --dport 80 -j ACCEPT
> iptables -t nat -A POSTROUTING -o eth0 -s 192.168.1.94 -j SNAT --to-source some_external_ip
> I was thinking of making http request from host to a different port and then based on that change source address to another external address and change the destination port to 80, but can't figure out how to do that.
> Does anyone have any ideas? Perhaps there is a different approach?
> Dennis O. Aliev
More information about the netfilter