Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Martin Kahlert <mkcon@gmx.de>
To: netfilter@lists.netfilter.org
Subject: Why do my packets not pass the (nat) OUTPUT chain?
Date: Thu, 1 Dec 2005 09:03:25 +0100	[thread overview]
Message-ID: <20051201080325.GA10367@keksy.local> (raw)

Hi!

i'm still struggling to redirect connections to outside hosts back to
my local machine.

# cat /proc/sys/net/ipv4/ip_forward 
1

# iptables -t nat -L -v
Chain PREROUTING (policy ACCEPT 37 packets, 8394 bytes)
 pkts bytes target     prot opt in     out     source     destination   

Chain POSTROUTING (policy ACCEPT 79 packets, 4870 bytes)
 pkts bytes target     prot opt in     out     source     destination   

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source     destination   
    0     0 REDIRECT   tcp  --  any    any     anywhere   66.249.93.104  tcp dpt:smtp

# telnet 66.249.93.104 25
<CTR-C>  (can't work on www.google.com)

# iptables -t nat -L -v
Chain PREROUTING (policy ACCEPT 37 packets, 8394 bytes)
 pkts bytes target     prot opt in     out     source     destination   

Chain POSTROUTING (policy ACCEPT 83 packets, 5110 bytes)
 pkts bytes target     prot opt in     out     source     destination   

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source     destination   
    0     0 REDIRECT   tcp  --  any    any     anywhere   66.249.93.104  tcp dpt:smtp

seems, that my packets from the local machine only pass the POSTROUTING chain.

Why can't i redirect this traffic? Did i miss anything essential?

Thanks for any help in advance,
Martin.


                 reply	other threads:[~2005-12-01  8:03 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20051201080325.GA10367@keksy.local \
    --to=mkcon@gmx.de \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox