RealServer IPTABLE setup help

I have my system all up and running.  I'm tring to turn on Linux Firewall 
( IPTABLE ) on my realserver but am lost as to what to us when using a 
TUNL0 setup

If I access my web server by its RIP address It works fine but when I go 
though the VIP address I get the following from tcpdump

12:43:07.786903 IP xx.xx.xx.17 > yy.yy.yy.194: IP zz.zz.zz.68.28538 > 
xx.xx.xx.218.http: S 1722808321:1722808321(0) win 8192 <mss 
1452,nop,wscale 2,nop,nop,sackOK> (ipip-proto-4)
12:43:07.786920 IP yy.yy.yy.194 > xx.xx.xx.17: icmp 80: host xx.xx.xx.194 
unreachable - admin prohibited


I'm using tunneling 

VIP address is  xx.xx.xx.218
PIP address is  xx.xx.xx.17
RIP address is  yy.yy.yy.194
CIP address is  zz.zz.zz.68


From what I read I should be using the following on my RealServer

iptables -t nat -A PREROUTING -d xx.xx.xx.218 -p tcp --dport 0:65535 -j 
REDIRECT

Most of what I have found on the net is talking about redirecting ports 
and stuff like that.  I want a simple rule to allow the DIRECTOR to send 
the packets to the REALSERVER to be processed and the REALSERVER firewall 
to pass them though.

If I turn off the firewall on the realserver I can acces the web site from 
the VIP address.

Thanks
Andy

_______________________________________________
Ultramonkey-users mailing list
[email protected]
http://lists.vergenet.net/listinfo/ultramonkey-users