iptables for port forwarding

[Nick <nlai@yahoo.com>]

Hi,

I want to do something relatively simple, but have not been able to
figure out from the manual or playing with it how to achieve what I
want.

I have a server which I can only connect to via port 80, due to a
firewall.  I want to connect to VNC on the server, and connect to it
via a VNC client my laptop.  VNC server only wants to run on port 5900.
 I'm not running an HTTP server on 80, so no prob there.  I want to
forward packets  coming into the server on port 80 to the VNC on 5900.

I tried doing this:
/sbin/iptables -A FORWARD -p tcp --dport 80 -j ACCEPT 
/sbin/iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth0 -j DNAT
--to 127.0.0.1:5900 

But the VNC client hangs for a while before timing out when I try to
connect to it.

Ideas on how to achieve the desired result?

Thanks,

Nick


	
		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - You care about security. So do we. 
http://promotions.yahoo.com/new_mail