From: Gerald Leier (gl_at_revolto.at)
Date: Thu 18 Sep 2003 - 18:39:29 BST
thank you very much :) that did the trick.
On Thu, 18 Sep 2003 14:02:53 +0100, Luís Miguel Silva wrote
> I think you're missing SNAT...try out:
> iptables -A POSTROUTING -t nat -s 10.0.0.0/0 -d 0/0 -j SNAT --to
your.exter.nal.ip
>
> Best,
> +-----------------------------------------
> | Luís Miguel Silva
> | Network Administrator@ ISPGaya.pt
> | Rua António Rodrigues da Rocha, 291/341
> | Sto. Ovídio . 4400-025 V. N. de Gaia
> | Portugal
> | T: +351 22 3745730/3/5 F: +351 22 3745738
> | G: +351 93 6371253 E: lms_at_ispgaya.pt
> | H: http://lms.ispgaya.pt/
> +-----------------------------------------
> -----Mensagem original-----
> De: Gerald Leier [mailto:gl_at_revolto.at]
> Enviada: quinta-feira, 18 de Setembro de 2003 15:31
> Para: vserver_at_solucorp.qc.ca
> Assunto: [vserver] networking
>
> hi folks
>
> i only got one official internet routeable ip address and want to setup
> a few servers in a vserver security context.
>
> what i did now was:
>
> create an dummy device (dummy0) and give it a privatipaddress.
> then i added a vserver with the following settings:
> IPROOT="10.0.0.3"
> IPROOTDEV="dummy0"
>
> then i did:
> iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
>
> but all i can is ping around, the rest doesnt work at all.
> also want to use real dest/source nat instead of masquerade.
>
> i recognized that i cant change routing within a vserver so
> my thoughts might all be senseless crap.
>
> how should networking be done with vserver ?
>
> i thought i build something like this:
>
> realserver: REALADDRESS
>
> vserver1: 10.0.0.1
> apache on :80,:443 (namebased virtualhosts, as a
> reverseproxy)
>
> vserver2: 10.0.0.2
> apache on any port (the realcontentserver, requests get forwarded
> to this one)
>
> anyone a hint on vserver networking ?
>
> sorry couldnt find any documentation on this also i didnt find a searchable
> maillinglist.
>
> thanks
> gerald