AW: portforwarding of udp + tcp

["HGS: Buchleitner Martin" <mb@hgs.at>]

thanks - it works

the kernel wos wrong configured.

on problem left: iptabels does not run from script...


martin

-----Ursprungliche Nachricht-----
Von: Vineet Kumar [mailto:debian-security@virtual.doorstop.net]
Gesendet: Dienstag, 3. Juli 2001 11:11
An: debian-firewall@lists.debian.org
Betreff: Re: portforwarding of udp + tcp


Check out xinetd.

Why didn't it work through iptables?

iptables -t nat -A PREROUTING -i $EXT_IF -p udp -d $EXT_IP --dport 53 -j
DNAT
--to-destination $INTERNAL_SERVER

and make sure you also have it allowed to pass through the FORWARD chain
with something like

#forward traffic
iptables -A FORWARD -i $EXT_IF -o $INT_IF -p udp -d $INTERNAL_SERVER
--dport 53 -j ACCEPT
#reply traffic
iptables -m state -A FORWARD -o $EXT_IF -i $INT_IF -p udp -s
$INTERNAL_SERVER --sport 53 --state ESTABLISHED,RELATED -j ACCEPT

(beware, those are just off the top of my head, not tested)

Vineet

* HGS: Buchleitner Martin (mb@hgs.at) [010702 14:29]:
> Hi !
> 
> I am trying to get access to an internal server with an local-ip
number
> by portforwarding.
> 
> for tcp i found rinetd, because port-forwarding by iptables did not
> work.
> exists there a client which can do this with udp ?
> 
> i need udp for the dns-server, http and passive ftp work by rinetd.
> 
>  
> 
> martin
>