Re: IPTABLES port forwarding woes

[Erich Weiler <weiler@soe.ucsc.edu>]

Hmmm..  Follow up question to this.  How would the outgoing connection 
back to the internet find it's way back to the remote internet host, if 
the source address was re-written to machine 1 when in came in to begin 
with?  Wouldn't the original remote internet source address be lost in 
all the translation?

Thanks for your insight by the way!

-erich

Pascal Hambourg wrote:
> Erich Weiler a écrit :
>>
>> Ah, I forgot to mention, machine 2 is on a private network that is not
>> routed in any way.  So, there is no default gateway for machine 2...
>> That's why I was thinking the source port would have to be re-written
>> internally such that machine 2 would know to send it back through
>> machine 1 and then on to the internet... ?
> 
> Then indeed you need to SNAT the forwarded connection. Also make sure 
> that machine 1 has IP forwarding enabled.
> -- 
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html