[Plug-security] ipchains vs iptable

Carl Parrish plug-security@lists.PLUG.phoenix.az.us
14 Mar 2002 11:44:16 -0700


Rusty are you saying that I should change my chain to something like
this:

ipchains -A input -v  -i $EXTERNAL_INTERFACE -s any/0 -p tcp \
  -d 8081 -j REDIRECT $WEB_SERVER:80

I'm still not sure I understand REDIRECT correctly is there a diff
between REDIRECT and redir????

Thanks, 
Carl P. 
 
> My guess is that you'd change the line that says:
> 
>  ipchains -A input -v    -i $extint -p tcp    -d 0.0.0.0/0 25 -j REDIRECT $P25ACCEPTOR
> 
> to something like
> 
>  ipchains -A input -v    -i $extint -p tcp    -d 0.0.0.0/0 25 -j REDIRECT $P25ACCEPTOR
> 
> where you've defined P25ACCEPTOR as machine/port.  But I'm guessing, sorry.
> 
> (If you are looking for a difference, you won't find one ;-)
> 
> The other option would be to redirect to a local port and use redir to redirect
> to a different machine.
> 
> Hope this is a tiny bit helpful, anyway.
> 
> rc
> _______________________________________________
> Plug-security mailing list  -  Plug-security@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-security