[Shorewall-users] Routing inomcing TightVNC connections?

Colin Viebrock
Thu, 02 Jan 2003 09:02:59 -0000

Remco Barendse wrote:
> Hi!
>
> I have this rule to allow incoming VNC connections to a host on my
> private LAN:
> DNAT    net:$SITE1     loc:$JOHN             tcp     5900:5910
>
> This works perfectly the host can connect without problems.
>
> Would it be possible to link the internal host to an external ip?
>
> For example if Site1 would connect on the VNC port, all traffic gets
> forwarded to loc:$JOHN. But if net:$SITE2 connects (different public IP)
> then all traffic goes to host loc:$CHRIS ??

Uh, don''t you just need another rule?

DNAT	net:$SITE1	loc:$JOHN	tcp	5900:5910
DNAT	net:$SITE2	loc:$CHRIS	tcp	5900:5910

- Colin