DNAT Query

["Pavan Gokarn" <pavang@techknowledge.ws>]

[-- Attachment #1: Type: text/plain, Size: 1048 bytes --]

Hello,
    I am a system administrator new to IPTables, well pretty new. I have an issue with DNAT. my DNAT does not work internally. let me give you the configuration. I have a Firewall with 2 plumbed interface on the same card. eth0=172.16.19.231 and eth0:a=10.1.1.25. i have enabled ip_forward. now when i try to access a 10.0.0.0/8 ip address from 172.16.19.0/24 (http) using DNAT on the firewall NATBox it does not work. can you please give me a solution. the commands i issued are.
# iptables -t nat -A PREROUTING -d 172.16.19.152 -p tcp --dport 8080 -j DNAT --to 10.1.1.33:8080

#iptables -t nat -A POSTROUTING -d 10.1.1.33 -p tcp --dport 80 -j SNAT 10.1.1.25

(DNAT in the same network is working though)

can some one please help me with this. also i am writing a gui solution using 'C' as a frontend to iptables tool. Making it much easier for users to configure their firewall quickly. can someone give me the full description of NETFILTER/IPTables extentions and options (manpages is not enough)

Thanx a ton
Regards
Pavan

[-- Attachment #2: Type: text/html, Size: 1786 bytes --]