From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Stuart Lamble" Subject: DNAT not working Date: Thu, 18 Mar 2004 22:26:58 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <000101c40d27$5ce6ed20$0464a8c0@stu> Reply-To: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0002_01C40D38.206FBD20" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0002_01C40D38.206FBD20 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit Hello netfilter lists Can any one help me here. I have the following rule... iptables -t nat -A PREROUTING -i ppp0 -p tcp -d $FW-EXT-IP --dport 22 -j DNAT --to 192.168.100.6:22 Simply put I want to allow ssh from the internet to a server on my LAN, 192.168.100.6 My FORWARD rule is default accept. I understand that a packet comes into the firewall on an interface and then gets PREROUTED as above the gets passed to FORWARD = accept then to the destination??? Why is it not working? Do i need to do any special kernel, modprobe things? Thanks Stu --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.631 / Virus Database: 404 - Release Date: 3/17/2004 ------=_NextPart_000_0002_01C40D38.206FBD20 Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Message
Hello = netfilter=20 lists
 
Can = any one help me=20 here. I have the following rule...
 
iptables -t nat -A=20 PREROUTING -i ppp0 -p tcp -d $FW-EXT-IP --dport 22 -j DNAT --to=20 192.168.100.6:22
 
Simply = put I want to=20 allow ssh from the internet to a server on my LAN,=20 192.168.100.6
My = FORWARD rule is=20 default accept.
 
I = understand that a=20 packet comes into the firewall on an interface and then gets PREROUTED = as above=20 the gets passed to FORWARD =3D accept then to the=20 destination???
 
Why is = it not=20 working? Do i need to do any special kernel, modprobe=20 things?
Thanks
Stu

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.631 / Virus Database: 404 - Release Date: 3/17/2004

------=_NextPart_000_0002_01C40D38.206FBD20--