|
Posted by Ricardo Meechan on March 21, 2007, 4:09 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Hi all, hope you can help me with this little problem!
For the past couple of years we have had a linux machine (fedora) running as
a bridged/transparent router between our windows servers (that has a public
IP) and the gateway router (provided by BT).
Everything has been great but I'm looking to add a little more
functionality...
I want all http 80 traffic that is about to leave the network (entering the
bridged router) to redirect into another server running squid.
The problem is the routing of data.
I have tried many options but to no avail.
I added the following rule to the nat prerouting using only one of the
servers as a source for testing.:
-A PREROUTING -p tcp -s 194.72.xxx.xxx --dport 80 -j DNAT --to-destination
192.168.x.x:80
But nothing happens. I tried the destination address as a 194.72 but it also
didnt work.
Routes are all working and the servers/squid/bridge (has a local ip on br0)
can talk to each other ok. ipv4 forwarding is enabled.
I probably haven't been detailed enough but if anyone has any solutions or
require more info then I would really really appreciate your help!
Many thanks in advance!
rico.
[root@xxxxxxx~]# ifconfig
br0 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20
inet6 addr: fe80::202:b3ff:feb4:6020/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:26881 errors:0 dropped:0 overruns:0 frame:0
TX packets:10798 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1813830 (1.7 MiB) TX bytes:2222767 (2.1 MiB)
br0:0 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20
inet addr:192.168.xxx.xxx Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
br0:1 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20
inet addr:194.72.xxx.xxx Bcast:194.72.111.191
Mask:255.255.255.240
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
eth0 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20
inet6 addr: fe80::202:b3ff:feb4:6020/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:141519 errors:0 dropped:0 overruns:0 frame:0
TX packets:139218 errors:0 dropped:0 overruns:0 carrier:0
collisions:1176 txqueuelen:1000
RX bytes:21761332 (20.7 MiB) TX bytes:111661372 (106.4 MiB)
eth1 Link encap:Ethernet HWaddr 00:02:B3:B4:60:21
inet6 addr: fe80::202:b3ff:feb4:6021/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:157758 errors:0 dropped:0 overruns:0 frame:0
TX packets:143081 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:112414496 (107.2 MiB) TX bytes:21491683 (20.4 MiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:50 errors:0 dropped:0 overruns:0 frame:0
TX packets:50 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4510 (4.4 KiB) TX bytes:4510 (4.4 KiB)
iptables:
|