NetFilter
[Top] [All Lists]

Re: DNAT Problems

To: Rafael Paris <raparis@gmail.com>
Subject: Re: DNAT Problems
From: Jan Engelhardt <jengelh@linux01.gwdg.de>
Date: Thu, 1 Mar 2007 00:11:02 +0100 (MET)
Cc: netfilter@lists.netfilter.org
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <431a83ad0702280633w2c0a88ddsa2132c44d3cbbe39@mail.gmail.com>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
References: <431a83ad0702280632w5c72b1d8rec20f41424b1927c@mail.gmail.com> <431a83ad0702280633w2c0a88ddsa2132c44d3cbbe39@mail.gmail.com>
Sender: netfilter-bounces@lists.netfilter.org
On Feb 28 2007 10:33, Rafael Paris wrote:
>
> I have been trying to have access to my internal mail server from
> internet but always get connection timed out.
> This is a very short set of rules being used for testing purposes with
> no success:
>
> iptables -t nat -A PREROUTING -p tcp -i ppp0 -d <external_fixed_ip>
> --dport 110 -j DNAT --to-destination <internal_ip:110>
> iptables -t nat -A PREROUTING -p tcp -i ppp0 -d <external_fixed_ip>
> --dport 25 -j DNAT --to-destination <internal_ip:25>
>
> iptables -t nat -A POSTROUTING -o ppp0 -j SNAT --to <external_fixed_ip>
>
> I'm using one ethernet device with my lan ip address and I can reach
            ^^^

There in lies your problem. All packets that came after the first one don't
even pass your box.



Jan
-- 


<Prev in Thread] Current Thread [Next in Thread>
  • DNAT Problems, Rafael Paris
    • Re: DNAT Problems, Jan Engelhardt <=