From mboxrd@z Thu Jan 1 00:00:00 1970 From: persaie persaie Subject: DNAT-PROBLEM Date: Sun, 2 May 2004 03:20:04 -0700 (PDT) Sender: netfilter-admin@lists.netfilter.org Message-ID: <20040502102004.98939.qmail@web61308.mail.yahoo.com> Mime-Version: 1.0 Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: quoted-printable To: netfilter@lists.netfilter.org MY NETWORK SETUP IS ...... =20 =20 192.168.1.0/24 -->>-- 192.168.1.64-(eth1)-----router------(eth0)-192.168.5.55---((--192.168.5.0/24 =20 ---------------------- WHEN I TRY TO DO DNAT =96 I AM UNABLES TO IT ....... http server is running properly at 192.168.5.50 , and listening at port 80, and there are no=20 firewall rules in machine 192.168.5.50, and policies are ACCEPT. ------------------------ =09 IP-forwarding is enabled on ROUTER machine. =20 =20 =20 RULES IN MY ROUTER ARE AS FOLLOWS ...... # Generated by iptables-save v1.2.8 on Sun May 2 15:26:18 2004 *nat :PREROUTING ACCEPT [1543:280620] :POSTROUTING ACCEPT [116:27287] :OUTPUT ACCEPT [19:1310] -A PREROUTING -d 192.168.1.64 -i eth1 -p tcp -m tcp --dport 80 -j LOG --log-prefix "http-req-at-prerout" -A PREROUTING -d 192.168.1.64 -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.5.50 COMMIT # Completed on Sun May 2 15:26:18 2004 # Generated by iptables-save v1.2.8 on Sun May 2 15:26:18 2004 *filter :INPUT ACCEPT [12830:1222977] :FORWARD ACCEPT [5058:1326927] :OUTPUT ACCEPT [3815:292159] -A FORWARD -d 192.168.5.50 -p tcp -m tcp --dport 80 -j LOG --log-prefix "going to 5.50..:" -A FORWARD -s 192.168.5.50 -p tcp -j LOG --log-prefix "coming from 5.50..:" COMMIT # Completed on Sun May 2 15:26:18 2004 =20 =20 ------------------------------ =20 >From 192.168.1.252 if i try to access http://192.168.1.64 then i get these messages in my router .. =20 MESSAGES IN /VAR/LOG/MESSAGES ARE AS FOLLOWS.... =20 May 2 15:25:02 fw kernel: http-req-at-preroutIN=3Deth1 OUT=3D MAC=3D00:05:5d:4b:6c:22:00:07:95:d2:0f:3f:08:00 SRC=3D192.168.1.252 DST=3D192.168.1.64 LEN=3D60 TOS=3D0x00 PREC=3D0x00 TTL=3D64 ID=3D37467 DF PROTO=3DTCP SPT=3D32935 DPT=3D80 WINDOW=3D5840 RES=3D0x00 SYN URGP=3D0 May 2 15:25:02 fw kernel: going to 5.50..:IN=3Deth1 OUT=3Deth0 SRC=3D192.168.1.252 DST=3D192.168.5.50 LEN=3D60 TOS=3D0x00 PREC=3D0x00 TTL=3D63 ID=3D37467 DF PROTO=3DTCP SPT=3D32935 DPT=3D80 WINDOW=3D5840 RES=3D0x00 SYN URGP=3D0 May 2 15:25:05 fw kernel: going to 5.50..:IN=3Deth1 OUT=3Deth0 SRC=3D192.168.1.252 DST=3D192.168.5.50 LEN=3D60 TOS=3D0x00 PREC=3D0x00 TTL=3D63 ID=3D37468 DF PROTO=3DTCP SPT=3D32935 DPT=3D80 WINDOW=3D5840 RES=3D0x00 SYN URGP=3D0 May 2 15:25:11 fw kernel: going to 5.50..:IN=3Deth1 OUT=3Deth0 SRC=3D192.168.1.252 DST=3D192.168.5.50 LEN=3D60 TOS=3D0x00 PREC=3D0x00 TTL=3D63 ID=3D37469 DF PROTO=3DTCP SPT=3D32935 DPT=3D80 WINDOW=3D5840 RES=3D0x00 SYN URGP=3D0 May 2 15:25:23 fw kernel: going to 5.50..:IN=3Deth1 OUT=3Deth0 SRC=3D192.168.1.252 DST=3D192.168.5.50 LEN=3D60 TOS=3D0x00 PREC=3D0x00 TTL=3D63 ID=3D37470 DF PROTO=3DTCP SPT=3D32935 DPT=3D80 WINDOW=3D5840 RES=3D0x00 SYN URGP=3D0 May 2 15:25:47 fw kernel: going to 5.50..:IN=3Deth1 OUT=3Deth0 SRC=3D192.168.1.252 DST=3D192.168.5.50 LEN=3D60 TOS=3D0x00 PREC=3D0x00 TTL=3D63 ID=3D37471 DF PROTO=3DTCP SPT=3D32935 DPT=3D80 WINDOW=3D5840 RES=3D0x00 SYN URGP=3D0 May 2 15:26:35 fw kernel: going to 5.50..:IN=3Deth1 OUT=3Deth0 SRC=3D192.168.1.252 DST=3D192.168.5.50 LEN=3D60 TOS=3D0x00 PREC=3D0x00 TTL=3D63 ID=3D37472 DF PROTO=3DTCP SPT=3D32935 DPT=3D80 WINDOW=3D5840 RES=3D0x00 SYN URGP=3D0 =20 =20 I am new to iptables , please help me solve this problem. Thanks in advance, regards, Rohit =09 =09 __________________________________ Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs =20 http://hotjobs.sweepstakes.yahoo.com/careermakeover=20