From: "Mario Ohnewald" <mario.Ohnewald@gmx.de>
To: netfilter@lists.netfilter.org
Subject: ftp contrack
Date: Mon, 24 Jan 2005 00:57:14 +0100 (MET) [thread overview]
Message-ID: <22793.1106524634@www29.gmx.net> (raw)
Hello List!
I am trying to redirect (NAT) to a internal ftp box (but both have a public
ip).
I am using those rules:
modprobe ip_conntrack_ftp ports=21,2121
modprobe ip_nat_ftp
iptables -t nat -A PREROUTING -d $FW -p tcp --dport 2121 -j DNAT --to
$FTP:21
iptables -A POSTROUTING -t nat -d $FTP -p tcp --dport 21 -j SNAT --to
$FW:2121
They kind of worked for a while. The forwarding of port 21 to 2121 worked
one out of 10 times maybe.
Now the packets dont get forwarded at all anymore.
/proc/sys/net/ipv4/ip_forward is set to 1.
Default policy is set to ACCEPT when i am testing it.
With tcpdump i see the packets coming in, but they don`t get forwarded.
Any idea what i am doing wrong?
Cheers, Mario
--
Sparen beginnt mit GMX DSL: http://www.gmx.net/de/go/dsl
next reply other threads:[~2005-01-23 23:57 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-01-23 23:57 Mario Ohnewald [this message]
2005-01-25 12:15 ` ftp contrack Filip Sneppe
2005-01-25 12:53 ` Jose Maria Lopez
2005-01-25 9:50 ` Mario Ohnewald
2005-01-25 13:43 ` Filip Sneppe
2005-01-25 10:20 ` Mario Ohnewald
2005-01-25 15:25 ` Filip Sneppe
-- strict thread matches above, loose matches on Subject: below --
2005-01-25 20:04 Piszcz, Justin Michael
2005-01-26 13:29 ` Jose Maria Lopez
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=22793.1106524634@www29.gmx.net \
--to=mario.ohnewald@gmx.de \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox