Prev: sk_buff & DMA
Next: How to force card speed ?
From: Ganso on 18 Apr 2008 05:30
Hi.
I have a linux appliance from Eneo Tech. (http://
www.eneotecnologia.com/) with the following setup:

(192.168.1.x)
192.168.1.7 ----
SERVER1 192.168.2.1
[ LAN1 ] ----------- [ ROUTER ] ---------- [ APPLIANCE ] --------
[ LAN 2 ] --------|
192.168.2.7 192.168.2.140
(192.168.2.x) ---- SERVER2 192.168.2.2

The appliance has 4 ethernet cards, and a br0 bridge which includes
all them. ETH2 is connected to the router, ETH3 is connected to LAN2,
and BR0 has an IP address of LAN2.

Now, I want to redirect all HTTP traffic going to SERVER1, to the same
port SERVER2.

I've tried the following rule:

iptables -t nat -A PREROUTING -p tcp -d 192.168.2.1 --dport 80 --to-
destination 192.168.2.2:80 -j DNAT


The redirection seems to be working, as far as I've seen with tcpdump
on SERVER2, but I'm not able to make a connection.

I have two suppositions:

1) I have to SNAT the response. I've tried that rule:
iptables -t nat -A POSTROUTING -p tcp --sport 80 -s 192.168.2.2 -d
192.168.1.0/24 -j SNAT --to-source 192.168.2.1

2) I have to use ebtables, as I'm using a bridge.

Any help? Thanks in advance :-)
 | 
Pages: 1
Prev: sk_buff & DMA
Next: How to force card speed ?