NetFilter
[Top] [All Lists]

Source port NAT

To: netfilter@lists.netfilter.org
Subject: Source port NAT
From: "Jean-Philippe Mignon" <jp.mignon@gmail.com>
Date: Tue, 20 Feb 2007 15:38:24 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=IPukIhGXQWjzmkXEeOWzg/nY7lmChZ6d0ObRkPlz3UXsNfof9tZtUyDLZiD4f4YK7MAfUJH+UTXGXXsKiPPQvacMAgswRlNzhLvS/QrLeOh52It6DH8LgPFQo79+S3ABq44cqSvv+bfjvaio9cymVZ+KAFixtahwpAQJX1qeJLQ=
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Sender: netfilter-bounces@lists.netfilter.org
HI.

I need some helps with port forwarding.
I have a SNMP agent listen on port 1610 (not 161 for rights restriction).
External applications send query to 161 port and wait response from this port.
Here's my configuration:

eth0:  192.168.0.1
eth0:0 192.168.0.2

iptables -t nat -I PREROUTING -p udp -d 192.168.0.2 --dport 161 -j
DNAT --to-destination 192.168.0.1:1610
iptables -t nat -I POSTROUTING -p udp -s 192.168.0.1 --sport 1611 -j
SNAT --to-source 192.168.0.2:161

When I query agent on 192.168.0.1:1610, I receive correct response from
192.168.0.2:161. But, when I query agent on 192.168.0.2:161, agent
log an error:
IOException: Operation not permitted.

If anybody can help me it would be appreciated.

Thank you !


<Prev in Thread] Current Thread [Next in Thread>
  • Source port NAT, Jean-Philippe Mignon <=