From mboxrd@z Thu Jan  1 00:00:00 1970
From: Patrick Nelson <pnelson@neatech.com>
Subject: Local rule for Port Forward
Date: 25 Apr 2003 09:45:45 -0700
Sender: netfilter-admin@lists.netfilter.org
Message-ID: <1051289143.14581.25.camel@il.npn>
Reply-To: pnelson@neatech.com
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <netfilter-admin@lists.netfilter.org>
Errors-To: netfilter-admin@lists.netfilter.org
List-Help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-Post: <mailto:netfilter@lists.netfilter.org>
List-Subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
List-Archive: <https://lists.netfilter.org/pipermail/netfilter/>
Content-Type: text/plain; charset="us-ascii"
To: Netfilter List <netfilter@lists.samba.org>

RH72 with iptables v1.2.5-3

I'm doing port forwarding to a server that runs jabber and everything
works fine, I did notice that if I bring up a jabber client on the
firewall itself I do not get connected.  While this isn't really
needed... I don't totally understand why it doesn't work.  Being
inquisitive... well I just gots to know why!  Can anyone shed some
light?

My rules for the jabber port forward are:

iptables -A FORWARD 
         -i $ExIF -d $JabIP -p tcp --dport $JabPort 
         -j ACCEPT
iptables -A PREROUTING 
         -t nat -d $ExIP -p tcp --dport $JabPort
         -j DNAT --to-destination $JabIP
iptables -A POSTROUTING
         -t nat -d $JabIP -p tcp --dport $JabPort
         -j SNAT --to-source $InIP