From mboxrd@z Thu Jan 1 00:00:00 1970 From: saint Subject: RE: Port forward Date: 05 Feb 2003 00:31:15 +1100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1044365475.8127.6.camel@juna.cypherworld.org> References: Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: ASC - Ronald Roeleveld , Netfilter Mailing List I don't know what your setup is but I myself explicitly FORWARD things to telnet: e.g: # Allow access to machines from the private LAN: iptables -A FORWARD -i INTERFACE_CONCERNED -o OUTPUT_INTERFACE -p tcp \ -s $LAN_MACHINES --sport $UN_PRIVILEGED_PORTS \ -d $DESTINATION_ADDRESS --dport 23 \ -m state --state NEW -j ACCEPT you get the hint. Any way why use telnet? I recommend secure shell (tcp port 22). Santos. Security is a blessing.