Re: Yet another local nat/port redirecting question

[Henrik Martin <henrik@netgate.net>]

On Thursday 26 April 2007 03:10, Gáspár Lajos wrote:

> As Martijn wrote: the problem could be that you run the web server
> binded to a specific IP.
>
> What is the ouput of this? :
>
> netstat -a -n | grep 8080
>
>
> Swifty

As I mentioned in the follow-up posting, I've tried forwarding to
ports that are bound to 0.0.0.0, 127.0.0.1, the 192.168.x.x address,
etc. There's absolutely no difference in behavior, it all fails with
the same symptoms. Here's netstat's output:

cobra:/home/basil # netstat -ant
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:6010          0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:3306          127.0.0.1:24451         
ESTABLISHED
tcp        0      0 :::225                  :::*                    LISTEN
tcp        0      0 127.0.0.1:8005          :::*                    LISTEN
tcp        0      0 :::8009                 :::*                    LISTEN
tcp        0      0 :::8080                 :::*                    LISTEN
tcp        0      0 ::1:25                  :::*                    LISTEN
tcp        0      0 ::1:6010                :::*                    LISTEN
tcp        0      0 :::8443                 :::*                    LISTEN

I've tried forwarding port 80 to basically every one of these ports
and then attempted a telnet connection to that port. If I do it from
the "outside", the connection just hangs like the port is being
filtered. If I do a "telnet localhost 8080" I get:

Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
Trying ::1...
telnet: connect to address ::1: Connection refused

According to the iptables man page, locally generated packets are
mapped to the 127.0.0.1 address, so this should work I'd think.

There's got to be other people running OpenSuSE 10.X out there that
are trying to do the same thing. Does anyone have a success story for
port forwarding on that platform? I've scoured the SuSE blogs and
support sites, but haven't really found anything. And Novell makes you
go through hoops just to sign up so you can post things to their
forums :-(
Thanks,

/Henrik