From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Sathi" Subject: Destination NAT Date: Fri, 14 Mar 2003 16:31:44 +0530 Sender: netfilter-admin@lists.netfilter.org Message-ID: <045501c2ea19$1dfc4830$870110ac@samsi> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0452_01C2EA47.332FBF60" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0452_01C2EA47.332FBF60 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello All, I am running squid as reverse proxy and its working fine. Now i need to set iptables rules to forward ftp ports directly to = backend server for file upload. I set in prerouting rule as /sbin/iptables -t nat -A PREROUTING -p tcp --dport 20 -d 172.16.1.10 -j = DNAT --to 172.16.1.25 /sbin/iptables -t nat -A PREROUTING -p tcp --dport 21 -d 172.16.1.10 -j = DNAT --to 172.16.1.25 Note: Reverse proxy and backend servers are running in same network.and = by reverse proxy has only one network interface. but i was not able to connect to backend server. In tcpdump i can see a request from client to squid server but it is not = forwarding to backend server. What is the correct rule to forward the ftp ports to backend server. Regards, Sathi ------=_NextPart_000_0452_01C2EA47.332FBF60 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hello All,
 
I am running squid as reverse proxy and = its working=20 fine.
 
Now i need to set iptables rules to = forward ftp=20 ports directly to backend server for file upload.
 
I set in prerouting rule = as
 
/sbin/iptables -t nat -A PREROUTING -p = tcp --dport=20 20 -d 172.16.1.10 -j DNAT --to 172.16.1.25
/sbin/iptables -t nat -A PREROUTING -p = tcp --dport=20 21 -d 172.16.1.10 -j DNAT --to 172.16.1.25
 
Note: Reverse proxy and backend servers are running in same = network.and by=20 reverse proxy has only one network interface.
 
but i was not able to connect to backend server.
 
In tcpdump i can see a request from client to squid server but it = is not=20 forwarding to backend server.
 
What is the correct rule to forward the ftp ports to backend = server.
 
Regards,
Sathi
------=_NextPart_000_0452_01C2EA47.332FBF60--