Re: iptables natting

[Graham Smith <graham@shallowsea.com>]

> | iptables -A FORWARD -i eth0 -o eth1 -d 192.168.0.10 -p tcp -j ACCEPT
> |
> | iptables -t nat -I PREROUTING -p tcp -i eth0 --dport 8080 -j DNAT
> | --to-destination 192.168.0.10
>
> Change this to:
>
> iptables -t nat -I PREROUTING -p tcp -i eth0 --dport 8080 -d YOURPUBLICIP
> -j DNAT --to-destination 192.168.0.10
>
> which will apply the rule only to incoming connections to your public IP.

Ok, that's changed.

>
> 192.168.0.10 is trying to make a connection to 192.168.0.10 on port 8080
> and that's being rejected by your firewall.  Is 192.168.0.10 on the same
> machine as the firewall?
>

No it's a different machine to the firewall and isn't running iptables itself. 
That's why I don't understand why it doesn't work. The message appears on the 
server machine and eth1 is the internal interface.

Any attempt to contact http://publicipaddress:8080/ is rejected if it comes 
from inside my network but works fine if the connection comes from outside.

-- 

 .¸¸.·´¯`·.¸¸.·´¯`· Shallow Sea Aquatics .¸¸.·´¯`·.¸¸.·´¯`·
 .¸¸.·´¯`·.¸¸.·´¯ http://www.shallowsea.com ¸.·´¯`·.¸¸.·´¯`