From: Grant Taylor <gtaylor@riverviewtech.net>
To: Mail List - Netfilter <netfilter@lists.netfilter.org>
Subject: Re: DNAT not working
Date: Fri, 22 Dec 2006 14:38:44 -0600 [thread overview]
Message-ID: <458C4254.4060007@riverviewtech.net> (raw)
In-Reply-To: <458BF3C2.4050700@initon.com>
Balazs Fulop wrote:
> # Generated by iptables-save v1.3.5 on Fri Dec 22 14:23:36 2006
> *nat
> :PREROUTING ACCEPT [58:10171]
> :POSTROUTING ACCEPT [13:1459]
> :OUTPUT ACCEPT [13:1459]
> -A PREROUTING -d aaa.bbb.ccc.fff -i eth0 -p tcp -m tcp --dport 25 -j
> DNAT --to-destination 192.168.3.1
> -A PREROUTING -j LOG --log-prefix "PREROUTING: " --log-level 7
> COMMIT
<snip>
> If I telnet 192.168.3.1 25 on the firewall, an SMTP session starts. If I
> telnet from outside (coming on eth0), it waits until timeout. I just
> can't figure out why it is not working. At last I removed all the IP
> aliases, and it didn't work that way either. There is nothing relevant
> in /var/log/syslog. I have 1 in /proc/sys/net/ipv4/ip_forward.
It does not look like you are SNATing / MASQUERADing your traffic back
out to the internet.
Grant. . . .
next prev parent reply other threads:[~2006-12-22 20:38 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-12-22 15:03 DNAT not working Balazs Fulop
2006-12-22 20:38 ` Grant Taylor [this message]
2006-12-22 21:14 ` Pascal Hambourg
2006-12-26 20:54 ` Balazs Fulop
-- strict thread matches above, loose matches on Subject: below --
2007-04-18 16:26 Payal Rathod
2007-04-18 17:34 ` Martijn Lievaart
2007-04-19 3:31 ` Payal Rathod
2007-04-19 11:15 ` Gáspár Lajos
2007-04-19 17:18 ` Payal Rathod
2004-07-12 15:12 DNAT Not working Nicolas Ross
2004-07-12 15:59 ` Antony Stone
2004-07-12 16:13 ` Nicolas Ross
2004-07-12 16:33 ` Antony Stone
2004-03-18 20:26 DNAT not working Stuart Lamble
2004-03-18 20:49 ` John A. Sullivan III
2004-03-18 21:58 ` Antony Stone
2004-03-18 20:50 ` Antony Stone
2004-03-20 17:47 ` Stuart Lamble
[not found] <20031224052809.18657.42710.Mailman@netfilter-sponsored-by.noris.net>
2003-12-24 10:24 ` DNAT NOT WORKING madhav bhasin
2003-12-24 10:33 ` Antony Stone
2003-12-25 18:31 ` Thomas Scheffczyk
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=458C4254.4060007@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox