diff --git a/docs/FAQ.xml b/docs/FAQ.xml index 18969d97c..9a63faabe 100644 --- a/docs/FAQ.xml +++ b/docs/FAQ.xml @@ -493,6 +493,33 @@ eth1:192.168.1.4 0.0.0.0/0 192.168.1.1 tcp 21 + +
+ (FAQ 1g) I would like to redirect port 80 on my public IP + address (206.124.146.176) to port 993 on internet host 66.249.93.111 + + + Answer: This requires a vile + hack similar to the one in FAQ 2. Assuming + that your Internet zone is named net and connects + on interface eth0: + + In /etc/shorewall/rules:#ACTION SOURCE DEST PROTO DEST PORT SOURCE ORIGINAL +# PORT DEST. +DNAT net net:66.249.93.111:993 tcp 80 - 206.124.146.176 + + In /etc/shorewall/interfaces, specify the + routeback option on + eth0:#ZONE INTERFACE BROADCAST OPTIONS +net eth0 detect routeback + + And in /etc/shorewall/masq;#INTERFACE SOURCE ADDRESS PROTO PORT +eth0:66.249.93.111 0.0.0.0/0 206.124.146.176 tcp 993 + + Like the hack in FAQ 2, this one results in all forwarded + connections looking to the server (66.249.93.11) as if they originated + on your firewall (206.124.146.176). +