From: ThE PhP_kiD <gregoriandres@yahoo.com.ar>
To: lartc@vger.kernel.org
Subject: [LARTC] DNAT rare problem...
Date: Thu, 17 Jul 2003 00:32:38 +0000 [thread overview]
Message-ID: <marc-lartc-105840234313782@msgid-missing> (raw)
Hi!
I've the next network:
inet
|
|
| 20.5.90.194/26
| 20.5.90.195/26
---------------------
| eth0 |
| |
| internet gateway |
| |
| eth1 |
---------------------
| 192.168.100.254/24
| 192.168.210.254/24
|
+------------------+-----+----------------+
| | |
| 192.168.100.1/24 | 192.168.210.1 |
| | |192.168.210.2
-------------- +------------+ +--------+
| eth0 | | host 1 | | host 2 |
| SENDMAIL | +------------+ +--------+
--------------
The internet gateway is a linux 2.4.21 with iptables 1.2.8
On eth0, it haves two IPs public:
20.5.90.194/26
20.5.90.195/26
Since I can't to route last public IPs, and I need to run
a Sendmail server that can be visible from internet, I have maked
a DNAT rule, (and some SNAT rules too, in order to provide
internet access to LAN)
# iptables -L -t nat -n
give me the next:
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT all -- 0.0.0.0/0 200.5.90.195 to:192.168.100.1
ACCEPT all -- 192.168.100.1 0.0.0.0/0
ACCEPT all -- 192.168.210.1 0.0.0.0/0
ACCEPT all -- 192.168.210.2 0.0.0.0/0
DROP all -- 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 192.168.100.0/24
SNAT all -- 192.168.100.1 0.0.0.0/0 to:20.5.90.195
SNAT all -- 192.168.210.1 0.0.0.0/0 to:20.5.90.194
SNAT all -- 192.168.210.2 0.0.0.0/0 to:20.5.90.194
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
From Internet (wan site), I can reach without problems the Sendmail server
host, making ping to 20.5.90.195, and open port 25.
From Lan side (hosts 192.168.102.1 or 192.168.102.2), I can ping to 20.5.90.195
but I can't to open port 25...
(but sometimes, I can do it !!)
What happen ????????
Thank you very very much in advance.
Mac
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
next reply other threads:[~2003-07-17 0:32 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-07-17 0:32 ThE PhP_kiD [this message]
2003-07-17 4:51 ` [LARTC] DNAT rare problem Martin A. Brown
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=marc-lartc-105840234313782@msgid-missing \
--to=gregoriandres@yahoo.com.ar \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.