Shorewall users - Oct 2002 - Using eth0:1

I''m using eth0: to respond to a different ip, and apache running a
virtual server at that ip. I can ping the ip from outside; but cannot connect to
the virtual web server. I have a DNAT that works for one of the apache servers
now.

Is the firewall stopping these packets, I can''t tell from the messages
file.

Thanks;
Mike

Mike Oroza wrote:
> I''m using eth0: to respond to a different ip, and apache running a
> virtual server at that ip. I can ping the ip from outside; but cannot 
> connect to the virtual web server. I have a DNAT that works for one of 
> the apache servers now.
>  
> Is the firewall stopping these packets, I can''t tell from the
messages file.
>  
In general, if you want to DNAT using a second IP then you need a separate 
DNAT rule that lists that second ip in the <original destination> column.

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net