[Firehol-support] Please help with the configuration of Debian 8 and Xen and networking with only one network card and multiple external IP addresses.

[Tsaousis, Costa]

Hi, you need to use the firehol dnat helper:
https://firehol.org/firehol-manual/firehol-nat/


For example, to send to 10.0.0.1 all traffic that was sent to PUBLIC.IP.1,
use this:

dnat to 10.0.0.1 dst PUBLIC.IP.1


FireHOL v3+ nat helper is very powerful. Check the docs.

Costa



On Wed, Feb 24, 2016 at 12:20 AM, Christian-Josef Schrattenthaler <
cjs1976 at me.com> wrote:

> Hi!
>
> I have a rootserver with only one network card and 4 official (external
> IPs). The server runs under Debian 8. I installed the Xen of the
> distribution. I added the 4 IPs to the network card (like it is described
> in the official Debian documentation). And if I do a checkup and a test,
> everything seems to work fine.
>
> The idea now is to create a couple of virtual servers under Xen which uses
> internal IP addresses (e.g. 10.0.0.1 - 10.0.0.5). All of the servers should
> be able to connect to the internet (would be cool, if I could decide which
> server uses which external IP address to appeare on the Internet), but only
> a couple of them should accept incoming request. Depending on the external
> IP and the used port I need to forward the request to an internal IP
> address of on of my virtual servers.
>
> I tried to find the solution myself, but I got stucked. After reading a
> lot of manuals I don't know what would be the right way. I am completely
> confused about all of the possible options. I found nowhere a documentation
> or an Howto for this situation.
>
> I thought that maybe FireHOL could make my life easier, but I am still
> stuck with a working solution.
>
> Can someone help me or give me a hint in the right direction please?
>
> Thanks,
> Christian.
> _______________________________________________
> Firehol-support mailing list
> Firehol-support at lists.firehol.org
> http://lists.firehol.org/mailman/listinfo/firehol-support