Re: nat help!

[Brent Clark <bclark@eccotours.co.za>]

itachi@cnt.uo.edu.cu wrote:
> hello list
> im trying to nat some address here but nothing happeds
> check this rule
> what is wrong in there=?
>
> iptables -P INPUT ACCEPT
> iptables -P OUTPUT ACCEPT
> iptables -P FORWARD ACCEPT
> iptables -t nat -P PREROUTING ACCEPT
> iptables -t nat -P POSTROUTING ACCEPT
>
> ## Empezamos a filtrar
> ## Nota: eth0 es el interfaz conectado al router y eth1 a la LAN
> # El localhost se deja (por ejemplo conexiones locales a mysql)
> /sbin/iptables -A INPUT -i lo -j ACCEPT
>
> iptables -t nat -A PREROUTING --dst 10.30.142.12 -p tcp --dport 80 -j DNAT
> \--to-destination 10.30.143.1
>
> echo 1 > /proc/sys/net/ipv4/ip_forward

HI

You forgot the FORWARD

i.e. iptables -t filter -A FORWARD --dst 10.30.142.12 -p tcp --dport 80 -J ACCEPT

HTH

Kind Regards
Brent Clark