[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [K12OSN] Help with iptables



On Thu, 2008-12-11 at 08:55 +0000, Brian Chivers wrote:

> I'll try and draw a ASCII diagram, try being the word :-)
> 
> Thinclients 10.0.0.x
>          |
>          |
>       Server 10.0.0.1
>              192.168.0.100
>          |
>          |
>       MAIN NETWORK (All servers on 192.168.0.x/16 - Proxy 192.168.0.80:8080
>          |
>          |
>       Firewall (Green Network - 192.168.0.2)
> 	      (Orange DMZ - 172.16.0.x)
> 	      (Red - 212.219.x.x)
>          |
>          |
>        CISCO to Internet
> 
> What I don't want to is the thinclients to be able to access the internet WITHOUT the proxy but I'd 
> like them to be able to access the DMZ machines without using the proxy.
> 
Ah! Now I see what you are doing!
On the thin client server you need ALL web traffic NOT going to the DMZ
machine to go through the proxy

iptables -A -t nat POSTROUTING -d ! 172.16.0.0/255.255.255.0 -p tcp -m
tcp --dports 80,443 -j DNAT 192.168.0.80:8080



-- 
James P. Kinney III          
CEO & Director of Engineering 
Local Net Solutions,LLC                           
http://www.localnetsolutions.com

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney localnetsolutions com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]