asked on

IP Chains - MASQ

I wish to convert the present LAN setup and connect it to the net using only one public IP. This is since we are switching to an ISP that can provide us with only one public IP ( which will be used for our mail, web and DNS server). Previously we had 8. I feel there's a lot of reading I have to do to implement it.

I've heard that IP MASQ/Chains can be used to connect a LAN to the Internet using only one public IP. Are there beginners level, or step by step documents that I can read on this? This is all new to me =).

Thanks

ASKER CERTIFIED SOLUTION

vreddypatil

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

vreddypatil

To access your web server which is on your internal LAN from outside the world you have to configure for virtual server also.

Say your web server address is 192.168.1.2

Now add a virtual server

linux# ipvsadm -A -t202.15.1.1:80 -Swrr

the above command is for http port

Now add a real server

Linux# ipvsadm -a -t 202.15.1.1.5:80 -R 192.168.1.2:80 -m

For more details look for

http://www.linuxvirtualserver.org/
more precisely
http://www.linuxvirtualserver.org/VS-NAT.html

--Vijayapal

escheider

Why not get the IPCHAINS HOWTO? Here is a link to the document:

http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO.html

Essentially, you should have two network cards in the machine. One with the public ip address and one with an ip address of your internal network.

The above document explains this fairly well.

rqs

ASKER

Thank you very much for the help =)