1 |
We don't have enough public IP's but we want to have several real |
2 |
servers for different customers (SSH, Mail, etc.) in the private subnet. |
3 |
|
4 |
I also plan to switch from Microsoft ISA Server to an |
5 |
Open-Source-Solution with Linux. The solution can be simply done for |
6 |
webservers, but we need a solution for several services. |
7 |
|
8 |
I try to figure out the problem with a simple example: |
9 |
host1.domain.net IN A 1.2.3.4 |
10 |
host2.domain.net IN A 1.2.3.4 |
11 |
The gateway (1.2.3.4) should dynamicaly open a tunnel to |
12 |
192.168.0.1 if the query is for host1.domain.net |
13 |
and to |
14 |
192.168.0.2 if the query is for host2.domain.net |
15 |
|
16 |
If you need more details feel free to ask. |
17 |
|
18 |
Andreas |
19 |
|
20 |
|
21 |
Sean Cook schrieb: |
22 |
> My question is really what is the purpose? Are these webservers? Do they |
23 |
> have different services? You could use apache with mod_proxy for |
24 |
> webservices... |
25 |
> |
26 |
> If you can give a few other details as to what you are trying to accomplish, |
27 |
> I might be able to help a bit more. |
28 |
> |
29 |
> Sean |
30 |
> |
31 |
> On 18-Aug-2006, Andreas Herrmann wrote: |
32 |
>> Hi there, |
33 |
>> |
34 |
>> I want to setup a gateway / firewall solution with Gentoo. The network |
35 |
>> has following structure: |
36 |
>> |
37 |
>> Several host (host[1,...,x].domain.net) are defined within the DNS and |
38 |
>> all of them have the same A-Record with the IP 1.2.3.4 |
39 |
>> The gateway is listening on its external network interface with the IP |
40 |
>> 1.2.3.4 and has an internal interface with a private subnet |
41 |
>> (192.168.0.0/24). The hosts (host[1,...,x].) are addressed in this subnet. |
42 |
>> |
43 |
>> How can it be solved, that the gateway opens a tunnel to the special |
44 |
>> host in the private subnet (let.s say 192.168.0.3) if there is a query |
45 |
>> for host3.domain.net? |
46 |
>> |
47 |
>> In my opinion this cannot be done because the client queries the DNS and |
48 |
>> simply opens the connection to the IP 1.2.3.4 and the gateway has now |
49 |
>> hints how to decide to which internal host the tunnel should be opened. |
50 |
>> |
51 |
>> But this setup is possible because Microsoft ISA Server exactly does |
52 |
>> this job! |
53 |
>> |
54 |
>> I have no idea how to solve this. First idea was a kernel bridge between |
55 |
>> the interfaces. |
56 |
>> |
57 |
>> Do you have any hints for me? |
58 |
>> |
59 |
>> Thanks a lot! |
60 |
>> |
61 |
>> Andreas |
62 |
>> |
63 |
>> -- |
64 |
>> gentoo-server@g.o mailing list |
65 |
>> |
66 |
|
67 |
|
68 |
-- |
69 |
gentoo-server@g.o mailing list |