RE: Port forwarding and local firewall connections

["Julien VALIENTE" <j.valiente@osxt.com>]

> iptables -t nat -A PREROUTING -i ! $DMZIF -p tcp --dport 80 
> -j DNAT --to 192.168.10.2

> iptables -A FORWARD -p tcp -d 
> 192.168.10.2 --dport 80 -j ACCEPT

The correspondign SNAT should be:

Iptables -t nat -A POSTROUTING -p tcp -s 192.168.10.2 --sport 80 -o ! $DMZIF
-j SNAT --to-source 10.10.10.12

... Or something like this ;o) man iptables should help.