Internal access for NAT

["Ryan White" <ryan@itamigo.com>]

I have an external ip 12.34.56.78 NATed to 172.16.2.2 but when another
workstation behind the firewall tries to connect to 12.34.56.78 they are
unable to connect. Here is my little nat:

$IPTABLES -I PREROUTING -p tcp -t nat -d 12.34.56.78 --dport 80 -j DNAT --to
172.16.2.2:80
$IPTABLES -I PREROUTING -p tcp -t nat -d 12.34.56.78 --dport 443 -j
DNAT --to 172.16.2.2:443
$IPTABLES -I FORWARD -p tcp -i eth0 -d 172.16.3.6 -m state --state NEW -j
ACCEPT
$IPTABLES -I FORWARD -p tcp -o eth1 -d 12.34.56.78 -m state --state NEW -j
ACCEPT


What do I have to add to get an internal machine to access 12.34.56.78
directly?
Some answers to obvious questions:
Forward NAT works I can connect from the outside to 12.34.56.78:80
Internal access to the internal ip works, I can connect to 172.16.2.2:80

Thanks for your help.

-Ryan


-- 
To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org