LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

NAT routing not working

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: NAT routing not working
From: "Bruno L. F. Cabral" <bruno@xxxxxxxxxxxxxxx>
Date: Wed, 20 Sep 2000 12:43:58 -0300 (EST)
Hi there

I'm new to LVS but not new to linux and portforwarding

here I have a working port forwarding server (using just ipchains
and ipmasqadm) with one real IP and one internal (10.x.x.x) network.
this works very well but I'm limited to one internal FTP server
(because of that reverse -- port 20 -- connection). now I need two :)

I read about piranha and LVS and decided to try the later, based
on the instructions at http://www.linuxvirtualserver.org/VS-NAT.html
but couldn't get success, so I'm writing in search of some aid

my test use the simpliest approach, which follows (200.200.200.10
is the REAL IP, 10.10.10.2 is the real server on the internal network).
I'm trying to redirect 200.200.200.10:23 to the real server telnet port

Kernel: 2.2.16 (redhat's default)/IP Virtual Server version: 0.9.12

        insmod ip_vs_rr.o
        echo 1 > /proc/sys/net/ipv4/ip_forward
        echo 1 > /proc/sys/net/ipv4/ip_always_defrag
        ipchains -F
        ipvsadm -C
        ipchains -A forward -j MASQ -s 10.0.0.0/24 -d 0.0.0.0/0
        ipvsadm -A -t 200.200.200.10:23 -s rr
        ipvsadm -a -t 200.200.200.10:23 -r 10.10.10.2:23 -m -w 1
        ipchains -L
        ipvsadm

the LVS router can ping the internet and the inside real server.
the real server can ping the internet (through the masq), and have 
the telnet open (in.telnetd:ALL on hosts.allow) and working
from both itself and from the router (in other words, networking is OK)

when I try to telnet from the internet, I got

        Trying 200.200.200.10...
        telnet: Unable to connect to remote host: Connection refused

and nothing is log on the real server ...
can any of you point me what I missed?

(in case it matters, the LVS-NAT router has two network cards and
it's connected to the same test HUB than the real server and the
test client -- lack of more HUBs to split the test networks ;~) )

TIA, !3runo



<Prev in Thread] Current Thread [Next in Thread>