From: Aleksander <aleksander@krediidiinfo.ee>
To: netfilter@lists.netfilter.org
Subject: Re: FTP through Firewall
Date: Tue, 07 Mar 2006 17:01:20 +0200 [thread overview]
Message-ID: <440DA040.2010700@krediidiinfo.ee> (raw)
In-Reply-To: <20060304184727.92357.qmail@web54708.mail.yahoo.com>
Davis Sylvester wrote:
> iptables -A FORWARD -m state --state
> RELATED,ESTABLISHED -j ACCEPT
> iptables -A FORWARD -m state --state NEW -i eth4 -o
> eth5 -d 1.1.1.2 -p tcp --dport ftp -j ACCEPT
> iptables -t nat -A PREROUTING -i eth1 -d 208.1.1.1 -p
> tcp --dport ftp -j DNAT --to 1.1.1.2
Shouldn't the PREROUTING rule's interface option (-i) match the one in
the FORWARD rule?
You're doing DNAT for packets from eth1, but allowing packets to the ftp
box that come from eth4.
Right now the packets are DROPped/REJECTed depending on your filter
FORWARD policy.
HTH,
Alex
prev parent reply other threads:[~2006-03-07 15:01 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-03-04 18:47 FTP through Firewall Davis Sylvester
2006-03-04 19:13 ` Cedric Blancher
2006-03-07 15:01 ` Aleksander [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=440DA040.2010700@krediidiinfo.ee \
--to=aleksander@krediidiinfo.ee \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.