[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: nat help!



Pascal Hambourg a écrit :
Brent Clark a écrit :

itachi@cnt.uo.edu.cu wrote:

iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT

You forgot the FORWARD

i.e. iptables -t filter -A FORWARD --dst 10.30.142.12 -p tcp --dport 80 -J ACCEPT

According to the above, FORWARD default policy is already ACCEPT.

Besides, as FORWARD takes place after PREROUTING which contains the DNAT rule, it should be "--dst 10.30.143.1".

And for completeness, if the default policy was DROP, a second rule matching the return traffic would be necessary.



Reply to: