From mboxrd@z Thu Jan 1 00:00:00 1970 From: Antony Stone Subject: Re: Send local traffic to a different server. Date: Wed, 23 Jun 2004 14:33:28 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200406231433.28295.Antony@Soft-Solutions.co.uk> References: Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Return-path: In-Reply-To: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org On Wednesday 23 June 2004 3:08 pm, Brett Simpson wrote: > I've tried a number of different PREROUTING and POSTROUTING rules and can't > seem to make this work. > > I have a system with a single nic (eth0). While I'm on the system via a > shell I would like to connect to 127.0.0.1:6000 and get seemlessly > translated to 207.156.7.15:80. > > I tried the following without success: > > iptables -t nat -A PREROUTING -p tcp -d 127.0.0.1 -i lo --dport 6000 -j > DNAT--to-destination 207.156.7.15:80 > > iptables -t nat -A POSTROUTING -p tcp -d 207.156.7.15 -o eth0 --dport 80 -j > SNAT --to-source 127.0.0.1 Try: iptables -A OUTPUT -t nat -p tcp --dport 6000 -d 127.0.0.1 -j DNAT --to 207.156.7.15:80 Regards, Antony. -- The words "e pluribus unum" on the Great Seal of the United States are from a poem by Virgil entitled "Moretum", which is about cheese and garlic salad dressing. Please reply to the list; please don't CC me.