[SLE] One IP for firewall and web server
Hi, Can I set up a Firewall and a Web Server on two PCs with only one real IP (2xx.x.xxx.x)? How? Thanks, mtagoon -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
No , but you can network them together and by using ip masqerading you canshare the same ip among multiple machines. Basicaly you will set up one bix with ip-masq, firewalling , and dial on demand for dial up as well as dhcp for maaging the server ssinged ip address. all other machines access the internet via the other machine. Unfurtuanatly there is no out of the box idiot proof solution , its a build it your self project. At 10:31 AM 1/19/2000 +0700, mtagoon wrote:
Hi, Can I set up a Firewall and a Web Server on two PCs with only one real IP (2xx.x.xxx.x)? How? Thanks, mtagoon
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
I think this will work for you. i just copyed/pasted parts of my scripts. i think it will work if you just change the values though..:) make sure you understand what it does before you execute it, because it may not be exactly what you want. ######################## <snip> ################################ ipchains -F ipchains -P forward DENY EXTERNAL_INTERFACE="eth0" WEBSERVER="192.168.1.123/32" IPADDR=`ifconfig eth0 |grep 'inet addr'| \ awk '{print $2}'|sed -e "s/addr\://"` echo 1 > /proc/sys/net/ipv4/ip_forward ipchains -P forward DENY ipchains -A forward -j MASQ -s $WEBSERVER -d 0.0.0.0/0 ipchains -I input -p tcp -y -d $IPADDR 80 -m 1 ipmasqadm mfw -A -m 1 -r $WEBSERVER 80 ipchains -A input -i $EXTERNAL_INTERFACE -s $IPADDR -l -j DENY ######################## <snip> ################################ -- ======================================================================== Rocky McGaugh Atipa Linux Solutions Linux Systems Engineer www.atipa.com rocky@smluc.org rmcgaugh@atipa.com ======================================================================== On Wed, 19 Jan 2000, Samy Elashmawy wrote:
No , but you can network them together and by using ip masqerading you canshare the same ip among multiple machines. Basicaly you will set up one bix with ip-masq, firewalling , and dial on demand for dial up as well as dhcp for maaging the server ssinged ip address. all other machines access the internet via the other machine.
Unfurtuanatly there is no out of the box idiot proof solution , its a build it your self project.
At 10:31 AM 1/19/2000 +0700, mtagoon wrote:
Hi, Can I set up a Firewall and a Web Server on two PCs with only one real IP (2xx.x.xxx.x)? How? Thanks, mtagoon
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
participants (3)
-
mtagoon＠sita.cat.or.th -
rmcgaugh＠atipa.com -
samelash＠ix.netcom.com