Shorewall users - Jun 2003 - Proxyarp and port redirect

Hi shorewall users,
one quick question from "old" Europe.

Here is the scenario:
We are owner of a class C network and one of our firewalls is configured 
to handle the webservers.
The firewall has three interfaces: NET, DMZ, LOC
In the DMZ is one webserver with a Apache and 6 virtual interfaces. All 
the interfaces on this server are connected to the Internet via proxyarp.
So far, so good.
Now I need another virt. interface on this server. This interface should 
serve a JAVA based application on a non system port (ex. 8080). From 
external and internal networks it should be accessible transparent via 
Port 80.

Is it possible to use proxyarp and port redirect at the same time?
If the answer is yes, how is the rule?

Thanks
    --Frank

On Thu, 05 Jun 2003 15:40:18 +0200, Frank Huber <huber@itus-gmbh.de>
wrote:

>
> Is it possible to use proxyarp and port redirect at the same time?
> If the answer is yes, how is the rule?
>
Yes. If the IP addresss is 1.2.3.4, then the rule from the net is:

DNAT	net	dmz:1.2.3.4:8080	tcp	80	-	1.2.3.4

The rule for the local net is similar.

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://www.shorewall.net
Washington USA  \ teastep@shorewall.net