Re: Please help with the configuration of Debian 8 and Xen and networking with only one network card and multiple external IP addresses.
"Tsaousis, Costa" <[email protected]> Wed, 24 Feb 2016 09:57:42 +0200
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <CANL+VpZFq3XAM=CF2SgVSjZJkaD4nEWSBTQCHzaZDWtWzxgGjw@mail.gmail.com> |
Hi, you need to use the firehol dnat helper: https://firehol.org/firehol-manual/firehol-nat/ For example, to send to 10.0.0.1 all traffic that was sent to PUBLIC.IP.1, use this: dnat to 10.0.0.1 dst PUBLIC.IP.1 FireHOL v3+ nat helper is very powerful. Check the docs. Costa On Wed, Feb 24, 2016 at 12:20 AM, Christian-Josef Schrattenthaler < [email protected]> wrote: > Hi! > > I have a rootserver with only one network card and 4 official (external > IPs). The server runs under Debian 8. I installed the Xen of the > distribution. I added the 4 IPs to the network card (like it is described > in the official Debian documentation). And if I do a checkup and a test, > everything seems to work fine. > > The idea now is to create a couple of virtual servers under Xen which uses > internal IP addresses (e.g. 10.0.0.1 - 10.0.0.5). All of the servers should > be able to connect to the internet (would be cool, if I could decide which > server uses which external IP address to appeare on the Internet), but only > a couple of them should accept incoming request. Depending on the external > IP and the used port I need to forward the request to an internal IP > address of on of my virtual servers. > > I tried to find the solution myself, but I got stucked. After reading a > lot of manuals I don't know what would be the right way. I am completely > confused about all of the possible options. I found nowhere a documentation > or an Howto for this situation. > > I thought that maybe FireHOL could make my life easier, but I am still > stuck with a working solution. > > Can someone help me or give me a hint in the right direction please? > > Thanks, > Christian. > _______________________________________________ > Firehol-support mailing list > [email protected] > http://lists.firehol.org/mailman/listinfo/firehol-support _______________________________________________ Firehol-support mailing list [email protected] http://lists.firehol.org/mailman/listinfo/firehol-support