New answers tagged

0

This is called Proxy(ing). Yes this is possible by enabling the forwarding module on server1 and then add the appropriate forwarding rules on your iptables. For example: *On server1: Enable Forwading: echo "1" > /proc/sys/net/ipv4/ip_forward sysctl net.ipv4.ip_forward=1 Add forwarding Rules on Iptables iptables -t nat -A PREROUTING --dst ...


0

Yes this is possible. For example on linux with iptables: iptables -A PREROUTING -t nat -p tcp --dport B -j REDIRECT --to-port A


2

In our enviroment we set up a Service Bus Farm DNS and balance Service Bus traffic for ports 9354 and 9355, because only this ports are presented in Service Bus connection string. We use LVS (https://en.wikipedia.org/wiki/Linux_Virtual_Server) instead of NLB but I don't think this could be an issue for you.


0

Out of the choices you are considering, either should work fine, but since you have to use the same network cabling/switching, it's probably a better (as in best practice) solution to go with the same LAN network. Having two gateways is perfectly fine from a networking standpoint. Having two IP networks on the same physical network is also perfectly fine ...


0

iptables-DNAT rules will be replaced with the following settings. (Script execution user's .ssh/config) Host 10.20.30.40 Hostname 127.0.0.1 Port 1234 If ssh-portforward is running with the same user, I think it good to use the ProxyCommand. Host 10.20.30.40 ProxyCommand ssh server1.test.com nc %h %p


0

Beware: read this only if you have root access to both source and intermediate machines. Since you say source machine (let's call it A ) has no way to contact the destination one (called C ), I assume that there are routing or permission restrictions that prevent this. Restrictions that the intermediate (machine B) can avoid. You can make the source machine ...


0

Either use VPN connections for this (all machines connected via private network) which is safer or port forwarding (which is not a bad idea), just remember to limit connection IP pool on machine in private network.


1

Your first iptables rule is correct and sufficient to do the job. I'd consider explicitly specifying an incoming interface such as: iptables -t nat -A PREROUTING -i ${wan_if} -d ${jumper_ip} -p tcp --dport 22 -j DNAT --to-destination ${invisibleserver_ip} But this is not required. Your POSTROUTING rule is a bit flawed. I don't think it is going to break ...



Top 50 recent answers are included