Re: Port forwarding question

[Dimitri Yioulos <dyioulos@firstbhph.com>]

On Thursday September 21 2006 4:25 pm, you wrote:
> Greetings,
>
> Dimitri Yioulos wrote:
> > Noob, question:
> >
> > I want to allow a vendor to access a piece of equipment on our
> > LAN (192.168.100.46) through port 4000 from outside via a server
> > in our DMZ (www.xxx.yyy.zzz).  While I should know how to do
> > this, I'm not 100% sure.  Can someone help?
>
> DNAT.
>
> for example:
> iptables -t nat -A PREROUTING -d www.xxx.yyy.zzz -i eth1 -p tcp
> --dport 4000 -j
> DNAT --to 192.168.100.46

eth1 being the DMZ iface?

> iptables -t filter -A INETIN -d 192.168.100.46 -p tcp --dport 4000
> -j ACCEPT
>
> > Oh, and separately, how would I allow that access only through
> > the vendor's ip address, if that were the way I decided to go?
>
> for example:
> iptables -t nat -A PREROUTING -s 1.2.3.4 -d www.xxx.yyy.zzz -i eth1
> -p tcp --dport 4000 -j DNAT --to 192.168.100.46
>
>
> Regards,
>
> --
> Ritter

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.