[LARTC] Re: Troubles DNATing UDP

[dAm2K <dam2000@gmail.com>]

> > Once again, all those packets reach INPUT chain, rules in -t nat -I
> > PREROUTING not working.
> >
> > So here is the question: Does the UDP is being DNAT'ed differently
> > comparing with TCP? What is the difference? How can I DNAT them?
If your HW UDP pinger's default gateway is your natting firewall, try
to ping directly the 192.168.1.2 web server. If default gateway is
another router, try adding the route 192.168.1.0/25 to you HW pingers
and ping directly 192.168.1.2.
If this is not possible (and you are UDP pinging you firewall) open
dport 4000 udp in INPUT chain on your firewall and do natting:

iptables -t filter -A INPUT -p udp -m udp -s 10.10.0.0/16 -d
10.10.100.1 --dport 4000 -j ACCEPT
iptables -t nat -A PREROUTING -p udp -m udp -s 10.10.0.0/16 -d
10.10.100.1 --dport 4000 -j DNAT --to-destination 192.168.1.2

This way 192.168.1.2 host should receive udp packets coming from the firewall.

My setup is running smoothly with UDP and NAT, I'm using with
playstation online games...

Hope this help. Bye, Dino.

--
dAm2K, you know I'm there!
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc