From mboxrd@z Thu Jan 1 00:00:00 1970 From: ASC - Ronald Roeleveld Subject: RE: Port forward Date: Tue, 4 Feb 2003 14:43:42 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: Mime-Version: 1.0 Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: 'saint' Cc: "'netfilter@lists.netfilter.org'" Why I used telnet was just for testing. I wanted to test to make sure that if I connected to port 25 with telnet to my firewall that it redirected me to the mail server. And as it seems it doesn't work, because I get an error that no connection can me estabslihed. And offcource for management purpose I use SSH..:) -----Original Message----- From: saint [mailto:nagajuna@optushome.com.au] Sent: dinsdag 4 februari 2003 14:31 To: ASC - Ronald Roeleveld; Netfilter Mailing List Subject: RE: Port forward I don't know what your setup is but I myself explicitly FORWARD things to telnet: e.g: # Allow access to machines from the private LAN: iptables -A FORWARD -i INTERFACE_CONCERNED -o OUTPUT_INTERFACE -p tcp \ -s $LAN_MACHINES --sport $UN_PRIVILEGED_PORTS \ -d $DESTINATION_ADDRESS --dport 23 \ -m state --state NEW -j ACCEPT you get the hint. Any way why use telnet? I recommend secure shell (tcp port 22). Santos. Security is a blessing.