NetFilter
[Top] [All Lists]

Re: port forwarding through localhost

To: netfilter@lists.netfilter.org
Subject: Re: port forwarding through localhost
From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
Date: Fri, 26 Jan 2007 23:50:23 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <000301c74199$7db871f0$0d01a8c0@Mobi>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Organization: Plouf !
References: <000001c74194$d484d9b0$0d01a8c0@Mobi> <45BA7E51.40505@plouf.fr.eu.org> <000301c74199$7db871f0$0d01a8c0@Mobi>
Sender: netfilter-bounces@lists.netfilter.org
User-agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
Andy B. a écrit :
Sorry about the "3333", it was a typo. Of course I meant 3306.

My rules are working when we are talking about the external interfaces
(eth0), and the SQL Server is responding when talking directly to 10.0.0.100

You didn't say what is the kernel version. If it is >= 2.6.11, you're stuck.

As I suggested to someone else having the same problem as you, instead of using a DNAT rule you may use a TCP "proxy" such as stone (<http://www.gcd.org/sengoku/stone/>, supports UDP too) or 6tunnel (<http://toxygen.net/6tunnel/>, originally designed to relay connections between IPv6 and IPv4 hosts but works between IPv4 hosts too) which listens on the local port 3306 and relays the local connexions to the remote SQL server.


<Prev in Thread] Current Thread [Next in Thread>