Re: Port forwarding how ??

[Jeff Largent <jlargent@imagelinks.com>]

assuming:
	eth0 = 192.168.0.1
	eth1 = 192.168.0.13
	and all tables are DENY by default

iptables -A INPUT -i eth0 -p tcp -d 192.168.0.1 --dport 17015 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --dport 17015 -j ACCEPT

iptables -A PREROUTING -i eth0 -p tcp -m tcp --dport 27015 -j DNAT 
--to-destination 192.168.0.13:27015

iptables -A POSTROUTING -s 192.168.0.13 -o eth0 -p tcp -m tcp --sport 27015 -j 
SNAT --to-source 192.168.0.1:27015

iptables -A FORWARD -i eth0 -d 192.168.0.13 --dport 27015 -j ACCEPT
iptables -A FORWARD -i eth1 --dport 27015 -j ACCEPT
iptables -A FORWARD -i eth0 -m state --state INVALID,NEW -j DROP


Just a quick throw together but I think should work.

Sasa Ugrenovic wrote:
> Hi,sorry for sending mail before this to you Scott.
> 
> Let's forget the e-mails that I and you send before this one.
> 
> This is what I need to have.
> 
> 192.168.0.13 - Server located in LAN ( behind NAT and firewall ). -
> rh8.0
> 
> 192.168.0.1 - NAT,Firewall server. - rh 7.3
> 
> I have Counter Strike server located on 192.168.0.13, 27015 port.
> 
> Now,no one on the internet can see that server, they can see only NAT
> server, 192.168.0.1.
> 
> Now, i need to, when connecting on nat server 192.168.0.1:27015 UDP to
> redirect connection to internal 192.168.0.13:27015 server.
> 
> My routes are configured correctly ...
> 
> 
> 
>
-- 
Jeff Largent                   ImageLinks, Inc.
Sr System Admin                Melbourne, Fl 32935
(321) 253-0011                 fax:(321) 253-5559