Redirect domain to specific port

David G. Miller dave at davenjudy.org
Mon Dec 11 21:45:39 UTC 2006


"Ashley M. Kirchner" <ashley at pcraft.com> wrote:

> Arthur Pemberton wrote:
>> > The only way i know of is to have an ip per domain, then you can route
>> > accordingly.
>>     
>     Well, in that sense, I can add more IPs to the same interface 
> (eth0:0, eth0:1, etc., etc.) but I still don't know how to route them 
> afterwards.
Try a firewall rule along the lines of:

iptables -A PREROUTING -t nat -p tcp -d 123.45.67.89 --dport 8081 -j 
DNAT --to 192.168.0.5:5901

This port forwards 123.45.67.89:8081 to 192.168.0.5:5901 Replace the 
port numbers and IP addresses as appropriate.  If you know the address 
of the connecting systems, you can lock things down a little better by 
specifying the source addresses.  If VNC is running on the destination 
system, there is only password protection to keep the bad guys out.

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce




More information about the fedora-list mailing list