[prev in list] [next in list] [prev in thread] [next in thread]
List: linux-admin
Subject: Re: NAT (iptables) problem (help)
From: Jeff Largent <jlargent () imagelinks ! com>
Date: 2002-05-22 19:02:22
[Download RAW message or body]
I found you also have to make sure you are allowing forwarding of
port 80 to the host, and in some cases I've had to do postrouting
something like:
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport www -j DNAT --to-dest
192.168.1.20 )
iptables -t nat -A POSTROUTING -o eth0 -p tcp --sport 80 -j SNAT --to-source
xxx.xxx.xxx.xxx
iptables -A FORWARD -d 192.168.1.20 -p tcp -m tcp --dport 80 -j ACCEPT
rita jacques wrote:
> hi
> I have a LAN (linux mandrake boxes, with IP 192.168.0.1 to
> 20). I have also a gateway (linux mandrake with 2 Network
> cards eth0 with real IP AAA.BBB.CCC.DDD and eth1 with
> 192.168.0.1).
> What sould I do to redirect for example web request to
> 192.168.0.20 machine in the LAN...
> I tried iptables...not working
> (iptables -t nat -A PREROUTING -i eth0 -p tcp --dport www -
> j DNAT --to-dest 192.168.1.20 )
>
> Should I use iptables on the gateway only or on the linux
> boxes on the LAN also?
>
> What about SNAT?
> is this correct
> iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-
> source AAA.BBB.CCC.DDD
>
> Thanks
> Rita
>
> ______________________________________________________
> Boîte aux lettres - Lycos - http://www.lycos.fr
>
--
Jeff Largent ImageLinks, Inc.
Sr System Admin Melbourne, Fl 32935
(321) 253-0011 fax:(321) 253-5559
perl -e 'print unpack(u, "3=W=W+FEM86=E;&EN:W,N8V]M\"@``");'
-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic