Re: Help on outgoing packet (without NAT)

[Leonardo Rodrigues <leolistas@solutti.com.br>]

Em 22/09/11 12:58, Jorge Bastos escreveu:
>
> Correct, local generated packets.
> Tried:
>
> iptables -I OUTPUT -d 5.5.5.5 -p tcp --dport 80 --redirect-to 
> 192.168.1.221:80
>
> I'm missing something but not sure what, but it's on the redirect part.

     Your rule is absolutely incomplete and nonsense

     packet redirections should be done on the NAT table. If no table is 
specified on the command, you'll work on the filter table, which is not 
the one you want here. So '-t nat' is needed.

     the '--redirect-to' is not an argument for any of the known targets 
i know .... but as it seems you want to redirect some packet to another 
machine, than you'll probably want the DNAT target. Anyway, you have not 
specified any target, so iptables simply doesnt know what to do.

     calling the correct target with correct argument, your rule should 
look something like:

iptables -t nat -I OUTPUT -d 5.5.5.5 -p tcp --dport 80 -j DNAT 
--to-destination 192.168.1.221

     no need to specify the :80 port to the destination target. If you 
want to redirect to the same port, you dont need to specify that. You 
would need to specify if you were changing ports.

-- 


	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br

	Minha armadilha de SPAM, NÃO mandem email
	gertrudes@solutti.com.br
	My SPAMTRAP, do not email it