Re: Iptable NAT problem
It lookes like your having connection trackin issuse, make shure
ip_conntrack is loaded as a mod or compieled in.
Lookes like this thread should just be moved to "Debian Firewall - LIST"
<firstname.lastname@example.org> and off of the other lists.
--- Pradeeper <email@example.com> wrote:
> Hello Peter and Daniel
> On Mon, 2004-08-09 at 20:26, deb list wrote:
> > iptables -t nat -A PREROUTING -i eth0 -d 220.127.116.11 \
> > -j DNAT --to-destination 192.168.1.4
> > >
> > > iptables -t filter -A FORWARD -d 18.104.22.168 ... -j ACCEPT
> > and after the DNAT, the destination is re-written to 192.168.1.4
> > so it would need to be..
> > iptables -t filter -A FORWARD -i eth0 -d 192.168.1.4 -j ACCEPT
> Non of these worked :-o
> Nothing wrong in your rules though. According to my ISP, I have to put a
> route entry in my internet router (IBM 2210) to listen to "22.214.171.124"
> To verify this, I put a prerouting rule to nat 192.168.1.4 to my
> firewall's ip. Rule is like this,
> iptables -t nat -A PREROUTING -i eth0 -d 126.96.36.199 -j DNAT
> --to-destination 192.168.1.4
> And a post routing like,
> iptables -t nat -A POSTROUTING -s 192.168.1.4 -o eth0 -j SNAT
> --to-source 188.8.131.52
> And it worked :-)
> I don't want to play with my internet router (since it will effect to my
> whole network). Is there anyway of doing this?
> Or is this the only way I can do?
> Thanks for the help!
> To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.