Portfowarding not working while SNATing,

Portfowarding not working while SNATing,

[Ilo]

[-- Attachment #1: Type: text/plain, Size: 595 bytes --]

If have the following set for some port forwarding that I need done, which works well...

/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d 196.11.11.11 --dport 80 -j DNAT --to 10.0.0.2:80
/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d 196.11.11.11 --dport 389 -j DNAT --to 10.0.0.2:389

then once I set the following for SNAT so my local machines can get internet access my port forwarding 
stops working.

/sbin/iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to 196.11.11.11


Is there something im not doing right? can someone point me in the right direction.

tx.

[-- Attachment #2: Type: text/html, Size: 1373 bytes --]

RE: Portfowarding not working while SNATing,

[George Vieira]

[-- Attachment #1: Type: text/plain, Size: 1312 bytes --]

How about telling us what the problem is and what you've done to eliminate/test it.. ie. tcpdumping, -j LOG, etc..
 
I would've used -j MASQUERADE instead of SNAT personally......
 

Thanks,

 
____________________________________________
George Vieira
Citadel Computer Systems Pty Ltd Systems Manager georgev AT citadelcomputer DOT com DOT au 
Citadel Computer Systems Pty Ltd
Phone : +61 2 9955 2644 HelpDesk: +61 2 9955 2698  <http://www.citadelcomputer.com.au/> http://www.citadelcomputer.com.au
 
 
-----Original Message-----
From: Ilo [mailto:sneak@gmsg.co.za]
Sent: Tuesday, July 15, 2003 4:33 PM
To: netfilter@lists.netfilter.org
Subject: Portfowarding not working while SNATing,


If have the following set for some port forwarding that I need done, which works well...
 
/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d 196.11.11.11 --dport 80 -j DNAT --to 10.0.0.2:80
/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d 196.11.11.11 --dport 389 -j DNAT --to 10.0.0.2:389

then once I set the following for SNAT so my local machines can get internet access my port forwarding 
stops working.
 
/sbin/iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to 196.11.11.11
 
 
Is there something im not doing right? can someone point me in the right direction.
 
tx.

[-- Attachment #2: Type: text/html, Size: 4926 bytes --]

Portfowarding not working while SNATing,

[Ilo Lorusso]

[-- Attachment #1: Type: text/plain, Size: 595 bytes --]

If have the following set for some port forwarding that I need done, which works well...

/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d 196.11.11.11 --dport 80 -j DNAT --to 10.0.0.2:80
/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d 196.11.11.11 --dport 389 -j DNAT --to 10.0.0.2:389

then once I set the following for SNAT so my local machines can get internet access my port forwarding 
stops working.

/sbin/iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to 196.11.11.11


Is there something im not doing right? can someone point me in the right direction.

tx.

[-- Attachment #2: Type: text/html, Size: 1329 bytes --]