From mboxrd@z Thu Jan 1 00:00:00 1970 From: Robby Workman Subject: Re: Filtered Port Date: Tue, 31 Jan 2006 08:14:20 -0600 Message-ID: <43DF70BC.8010804@rlworkman.net> References: <43DF6C38.6010204@mail.bloomfield.k12.mo.us> <61929.193.173.147.3.1138716397.squirrel@webmail.sterenborg.info> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <61929.193.173.147.3.1138716397.squirrel@webmail.sterenborg.info> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org Rob Sterenborg wrote: > On Tue, January 31, 2006 14:55, Scott Mayo wrote: >> I am not sure if this is my iptables or not, but I am not sure where >> else to look or ask. I am trying to use Remote Desktop on a >> computer. From inside my network, it works fine, but once I get >> outside, I cannot use it. I have set my IPTABLES to forward anything >> going to port 3389 to the computer that is using Remote Desktop. >> >> The problems seems to be that port 3389 is filtered. I can find >> nothing in my iptables where I have this port filtered. Are there >> some generic ports, that IPTABLES filters on it own or something? If >> the IPTABLES are not filtering it, what else could be? > > You allow forwarding to this host but you also need to DNAT these > packets from the internet IP to the IP of your computer. > > $ipt -t nat -A PREROUTING -i -d \ > -p tcp --dport 3389 -j DNAT --to Rob, sorry for sending this to you first - I always forget to fix that... If it still doesn't work, it's quite possible that your ISP is filtering that port upstream of you. RW -- http://rlworkman.net