From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pascal Hambourg Subject: Re: need assistence for PREROUTING Date: Tue, 11 Jul 2006 11:36:21 +0200 Message-ID: <44B37115.4030702@plouf.fr.eu.org> References: <20060710235021.235F178@brinstar.nerim.net> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <20060710235021.235F178@brinstar.nerim.net> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="iso-8859-1"; format="flowed" To: netfilter@lists.netfilter.org Hello, Seferovic Edvin a =E9crit : >>$IPTABLES -t nat -A PREROUTING -i $ETH -p tcp --sport=20 >>$UNPRIVPORTS --dport 4444 -d xxx.xxx.xxx.xxx -j DNAT >> --to-destination 192.168.178.32 >=20 > You need port here !!! --to-destination 192.168.178.32:80 Also, 192.168.178.112 must be the gateway for the return packets so they=20 are properly un-DNATed.