[LARTC] Web Server with ADSL (continued) or something similar

[LARTC] Web Server with ADSL (continued) or something similar

[Carles Pina i Estany]

Hi,

I have tried it:

iptables -t nat -A PREROUTING -p tcp -i eth2 --dport 1000 -j DNAT --to
	\192.168.1.2:80

And doesn't work:

carles@pinux:~$ telnet SERVER 1000
Trying IP_SERVER...

And if I do it with redir command works fine.

What is the problem?
And the solution?

My network is something like:


 INTERNET	IP_EXT    <-     |Server|   ->  IP_INT (192.168.1.x)
				   NAT


Thank you very much!

----
Carles Pina i Estany | Nick: Pinux / Pine / Teufeus
E-Mail: carles.pina@salleURL.edu / is08139@salleURL.edu / cpina@cat-linux.com
http://www.salleURL.edu/~is08139/


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/

Re: [LARTC] Web Server with ADSL (continued) or something similar

[Stef Coene]

> I have tried it:
>
> iptables -t nat -A PREROUTING -p tcp -i eth2 --dport 1000 -j DNAT --to
> 	\192.168.1.2:80
>
> And doesn't work:
>
> carles@pinux:~$ telnet SERVER 1000
> Trying IP_SERVER...
>
> And if I do it with redir command works fine.
>
> What is the problem?
> And the solution?
Have you also used the other lines I sended?  You must be sure you are not 
blocking incoming port 1000.  And you must be sure you can forward to port 
80.  And I miss a -d option with the ip of your firewall/

This works fine for me.  This is a copy-paste from my firewall-script :

iptables -A INPUT -p tcp --dport 8088 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -d 192.168.1.254 --dport 8080 -j DNAT 
--to 192.168.1.253:80
iptables -t nat -A PREROUTING -p tcp -d $EX_IP --dport 8080 -j DNAT --to 
192.168.1.253:80
iptables -A FORWARD -p tcp -d 192.168.1.253 --dport 8080 -j ACCEPT

$EX_IP is the internet-ip of my firewall.
192.168.1.254 is the LAN-ip of my firewall
192.168.1.253 is the ip of my webserver

I hope this can help.

Stef
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/