Re: SSH dnat

["Jeroen van Leeuwen" <omzig@hetnet.nl>]

[-- Attachment #1: Type: text/plain, Size: 1161 bytes --]

are you sure that your server is listening on port 2323?
The rule as i use it is:
iptables -t nat -A PREROUTING -p tcp --dport 2000 -i eth2 -j DNAT --to 10.10.10.1:22

the server is listening on port 22 of 10.10.10.1
reachable from externel on port 2000

grtn jeroen
  ----- Original Message ----- 
  From: Ambor 
  To: netfilter@lists.netfilter.org 
  Sent: Sunday, December 01, 2002 6:52 AM
  Subject: SSH dnat


  Hello everyone,

  I'm trying to dnat SSH throught the firewall to an internal machine.
   I use following Rule

  iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 2323 -j DNAT --to-destination internal_IP:2323

  eth0 is connected to internet

  The problem is that the connection is allrght it just seems that I don't get an answer from the ssh server.
  (I'm getting a connection timeout, ot a connection refused)

  To be sure I don't filter anything, so all trafic is accepted

  Can someone help me?

  thx

  Ronny


  ---
  Outgoing mail is certified Virus Free.
  Checked by AVG anti-virus system (http://www.grisoft.com).
  Version: 6.0.422 / Virus Database: 237 - Release Date: 20-11-2002

[-- Attachment #2: Type: text/html, Size: 3398 bytes --]