Multiple web servers behind iptables

Hi,
I have one web server (www.x.y.z) behind a firewall iptables on Red Hat
Linux. Presently the firewall is configured s.t. all the http request
coming to single external IP (of iptables) is redirected to the
internal IP (172.16.1.10:80).
Now we would like to create another web server (intra.x.y.z). Necessary
entries have been made in our DNS through CNAME and zone entries (I can
successfully dig this web server also) and within the LAN behind the
firewall we can see this web server (172.16.1.14:80). I have made
similar port forwarding entries for intra.x.y.z (as a link within the
www.x.y.z site) but when the site is viewd from internet it always gets
only www.x.y.z !!
How can we make this additional web server visible from the internet?
Many thanks in advance
Karmath

Just an addition to the above situation. Just tried to ping intra.x.y.z
from outside internet, surprisingly it tired to ping an "internal
address: 172.16.1.14" which is certainly not correct as this IP is not
routable. What can be wrong with my configuration??

(E-Mail Removed) wrote:
> Hi,
> I have one web server (www.x.y.z) behind a firewall iptables on Red Hat
> Linux. Presently the firewall is configured s.t. all the http request
> coming to single external IP (of iptables) is redirected to the
> internal IP (172.16.1.10:80).
> Now we would like to create another web server (intra.x.y.z). Necessary
> entries have been made in our DNS through CNAME and zone entries (I can
> successfully dig this web server also) and within the LAN behind the
> firewall we can see this web server (172.16.1.14:80). I have made
> similar port forwarding entries for intra.x.y.z (as a link within the
> www.x.y.z site) but when the site is viewd from internet it always gets
> only www.x.y.z !!
> How can we make this additional web server visible from the internet?
> Many thanks in advance
> Karmath

(E-Mail Removed) wrote:
> Hi,
> I have one web server (www.x.y.z) behind a firewall iptables on Red Hat
> Linux. Presently the firewall is configured s.t. all the http request
> coming to single external IP (of iptables) is redirected to the
> internal IP (172.16.1.10:80).
> Now we would like to create another web server (intra.x.y.z). Necessary
> entries have been made in our DNS through CNAME and zone entries (I can
> successfully dig this web server also) and within the LAN behind the
> firewall we can see this web server (172.16.1.14:80). I have made
> similar port forwarding entries for intra.x.y.z (as a link within the
> www.x.y.z site) but when the site is viewd from internet it always gets
> only www.x.y.z !!
> How can we make this additional web server visible from the internet?

You have to keep the servers in a single
host - it's not possible to forward port
80 to several internal hosts at the same time.

If your server is Apache, learn to
use its virtual host feature. It
can separate the different target
names with identical IPort addresses.

--

Tauno Voipio
tauno voipio (at) iki fi