Multiple ip's on red interface.

[Guest]

[ozgurerdogan]

Hi
I want to assign mutliple public ip addresses for red interface for web server.  And want to make port forwarding depending on source ip. For example if request comes from 1.1.1.1 port 80 then should forward to internal 192.168.1.1 and if comes from 2.2.2.2 port 80 and should forward to internal 192.168.1.2.

This is neseccary for web hosting, for some specific web sites.
Is that possiple?
Thank you

[Buck]

Yeah I also want to known if this is possible.

[ozgurerdogan]

yes. Simple added the ips for red interface in aliases section. and used them on port forwarding. will you use on hosting envireoment. we can discuss on msn if you like to mine is ozgur__erdogan at hotmail com

[VagaStorm]

Would it be posible, ether throu the web interface or throu a shell, to add multiple interfaces to the orange sone so that I dont have to do any forwarding to get it to work? I whant servers with public ips in range .../28 and ..zzz./28 behind the router, but I dont realy know if it is doable... I dont mind adding it manualy. But it seems it is not easy to find a system that dos this and have snort ids 

[ozgurerdogan]

What you mean multible interface on Orange? You can use a hub or route them in endian if I understood you correctly.

[VagaStorm]

If posible I have something that looks kind of like this:
|
|- Green \-  desktop 1
|                \- desktop 2
|
|- Orange \ -   server on range ..20.
|                  \-   server on range ..20.
|                   \
|                    \-  server on range ..10.
|                     \- server on range ..10.
|
|- Red Internett connection

This is easily configurable with things like ebox and I think m0n0wall, but then I don't get snort, or at lest no webinterface for it.

[ozgurerdogan]

I think you can put a router on Orange interface and make the settings in router and make the port forwarding on endian. Why donot you have web interface?

[Buck]

Would it be posible, ether throu the web interface or throu a shell, to add multiple interfaces to the orange sone so that I dont have to do any forwarding to get it to work? I whant servers with public ips in range .../28 and ..zzz./28 behind the router, but I dont realy know if it is doable... I dont mind adding it manualy. But it seems it is not easy to find a system that dos this and have snort ids 

You need to use port forwarding.
I tried several other things but it only works with port forwarding in comcination with aliases(Network -> aliases) i think.

btw thx for the replay's