goldfish

I know you can set up Linux as a firewall/gateway/NAT, allowing you to share an Internet connection with several clients. But is it also possible to set it up so that you can have, for example, a web server behind the firewall, and allow users on the Internet to access the web server (much like Windows 2000 ICS and NAT) via the one public IP? Do you use ipchains?

Thanks for help in advance I am a newbie to linux.

sandman

Hi,

Yes, this is easy with iptables, the successor to ipchains for 2.4+ series kernels. You just need simple code like :

echo 1 > /proc/sys/net/ipv4/ip_forward
/sbin/modprobe iptable_nat
/sbin/iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth1-j DNAT --to 172.16.16.10:8080

Hope this helps