Hi all, hope you can help me with this little problem!
For the past couple of years we have had a linux machine (fedora) running as a bridged/transparent router between our windows servers (that has a public IP) and the gateway router (provided by BT).
Everything has been great but I'm looking to add a little more functionality...
I want all http 80 traffic that is about to leave the network (entering the bridged router) to redirect into another server running squid.
The problem is the routing of data.
I have tried many options but to no avail.
I added the following rule to the nat prerouting using only one of the servers as a source for testing.:
-A PREROUTING -p tcp -s 194.72.xxx.xxx --dport 80 -j DNAT --to-destination
192.168.x.x:80But nothing happens. I tried the destination address as a 194.72 but it also didnt work.
Routes are all working and the servers/squid/bridge (has a local ip on br0) can talk to each other ok. ipv4 forwarding is enabled.
I probably haven't been detailed enough but if anyone has any solutions or require more info then I would really really appreciate your help!
Many thanks in advance!
rico.
[root@xxxxxxx~]# ifconfig br0 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20 inet6 addr: fe80::202:b3ff:feb4:6020/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:26881 errors:0 dropped:0 overruns:0 frame:0 TX packets:10798 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1813830 (1.7 MiB) TX bytes:2222767 (2.1 MiB)br0:0 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20 inet addr:192.168.xxx.xxx Bcast:192.168.1.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
br0:1 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20 inet addr:194.72.xxx.xxx Bcast:194.72.111.191 Mask:255.255.255.240 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
eth0 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20 inet6 addr: fe80::202:b3ff:feb4:6020/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:141519 errors:0 dropped:0 overruns:0 frame:0 TX packets:139218 errors:0 dropped:0 overruns:0 carrier:0 collisions:1176 txqueuelen:1000 RX bytes:21761332 (20.7 MiB) TX bytes:111661372 (106.4 MiB)
eth1 Link encap:Ethernet HWaddr 00:02:B3:B4:60:21 inet6 addr: fe80::202:b3ff:feb4:6021/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:157758 errors:0 dropped:0 overruns:0 frame:0 TX packets:143081 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:112414496 (107.2 MiB) TX bytes:21491683 (20.4 MiB)
lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:50 errors:0 dropped:0 overruns:0 frame:0 TX packets:50 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:4510 (4.4 KiB) TX bytes:4510 (4.4 KiB)
iptables: