port forwarding through localhost
Andy B.
globi at hot.lu
Fri Jan 26 22:56:27 CET 2007
I have a port forwarding issue with localhost.
Here is the deal:
Webserver that uses many many mySQL connections to 127.0.0.1 (Port 3306).
Now I would like to put the mySQL server onto a dedicated machine without
changing the "127.0.0.1" setting on a few hundred websites.
The new mySQL Server listens on 10.0.0.100:3306
My first guess was the following ruleset on the webserver:
iptables -t nat -A PREROUTING -p tcp -i lo --dport 3306 -j DNAT --to
10.0.0.100
Then I tried to telnet 127.0.0.1 3306, which failed immediately
I figured out the prerouting is no good for localhost and changed it into:
iptables -t nat -A OUTPUT -o lo -p tcp --dport 3306 -j DNAT --to
10.0.0.100:3306
telnet 127.0.0.1 3306 seems to do something, but not what I expected:
$ telnet 127.0.0.1 3333
Trying 127.0.0.1...
<sleeping...... sleeping......>
Timeout eventually.
A few more informations on the webserver:
- eth0 = public IP (not needed here)
- eth1 = 10.0.0.99
- lo = 127.0.0.1
Dedicated MySQL Server:
- eth0 = public IP (not needed here)
- eth1 = 10.0.0.100
- lo = 127.0.0.1
What am I missing or doing wrong?
Thanks a lot,
Andy
More information about the netfilter
mailing list