--On Wednesday, March 09, 2005 11:33 -0800 "Shannon R." <shannon_mtbikes@yahoo.com> wrote:
good day list! we have limited public IPs and we're trying to run as many web servers behind 1 public IP as we can. now re iptables capability. can it distinguish the difference between destinations like, e.g., deb1.debian.org and deb2.debian.org even if both domains resolve to the same public ip address?
No. You need some sort of higher level stuff than is default....There are some projects out tehre to provide some of this funcionality, but what you might be better off doing is using a reverse proxy apache setup or soemthing similar and let it decide who to proxy the connection to. The downside is you'll lose track of who's connecting from where on the end servers. Another downside is the current netfilter modules that allow for this sort of behaviour are all pretty resource intensive.