NAT (iptables) problem (help)

NAT (iptables) problem (help)

[rita jacques]

[-- Attachment #1: Type: text/plain, Size: 736 bytes --]

hi
I have a LAN (linux mandrake boxes, with IP 192.168.0.1 to
20). I have also a gateway (linux mandrake with 2 Network
cards eth0 with real IP AAA.BBB.CCC.DDD and eth1 with
192.168.0.1).
What sould I do to redirect for example web request to
192.168.0.20 machine in the LAN...
I tried iptables...not working
(iptables -t nat -A PREROUTING -i eth0 -p tcp --dport www -
j DNAT --to-dest 192.168.1.20 )

Should I use iptables on the gateway only or on the linux
boxes on the LAN also?

What about SNAT?
is this correct
iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-
source AAA.BBB.CCC.DDD

Thanks
Rita

______________________________________________________
Boîte aux lettres - Lycos - http://www.lycos.fr

Re: NAT (iptables) problem (help)

[Jeff Largent]

I found you also have to make sure you are allowing forwarding of
port 80 to the host, and in some cases I've had to do postrouting
something like:


iptables -t nat -A PREROUTING -i eth0 -p tcp --dport www -j DNAT --to-dest 
192.168.1.20 )

iptables -t nat -A POSTROUTING -o eth0 -p tcp --sport 80 -j SNAT --to-source 
xxx.xxx.xxx.xxx

iptables -A FORWARD -d 192.168.1.20 -p tcp -m tcp --dport 80 -j ACCEPT



rita jacques wrote:
> hi
> I have a LAN (linux mandrake boxes, with IP 192.168.0.1 to 
> 20). I have also a gateway (linux mandrake with 2 Network 
> cards eth0 with real IP AAA.BBB.CCC.DDD and eth1 with 
> 192.168.0.1).
> What sould I do to redirect for example web request to 
> 192.168.0.20 machine in the LAN...
> I tried iptables...not working
> (iptables -t nat -A PREROUTING -i eth0 -p tcp --dport www -
> j DNAT --to-dest 192.168.1.20 )
> 
> Should I use iptables on the gateway only or on the linux 
> boxes on the LAN also?
> 
> What about SNAT?
> is this correct
> iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-
> source AAA.BBB.CCC.DDD 
> 
> Thanks
> Rita
> 
> ______________________________________________________
> Boîte aux lettres - Lycos - http://www.lycos.fr
> 


-- 
Jeff Largent                   ImageLinks, Inc.
Sr System Admin                Melbourne, Fl 32935
(321) 253-0011                 fax:(321) 253-5559
perl -e 'print unpack(u, "3=W=W+FEM86=E;&EN:W,N8V]M\"@``");'

-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html