RE: [suse-security] Re: Emulate real ip's to access intranet host s from outside

Hi Ramon Your approach won't work (someone with enough determination and resources could probably find a workaround, but you'd need to stress 'work' in that word). The reason for this is that the destination host generally doesn't and can't know what DNS name a connecting client used. DNS resolution takes place on the client side before the connection to the destination host is established. The destination host is completely unaware of it. If you're using distinct services, though, you can use DNAT. This means you can only run one server of a sort, if you stick to the well-known ports and don't employ any distribution mechanisms on the inside in load-balancer or similar style. Tobias