Re: Redirect and masquerading


Subject: Re: Redirect and masquerading
From: James Zuelow (jamesz@ideafamilies.org)
Date: Mon Apr 29 2002 - 11:29:13 AKDT


----- Original Message -----
From: "Mike Barsalou" <mbarsalou@aidea.org>
>
> iptables -t nat -I PREROUTING -p tcp -d <EXTIP> --dport 80 -j DNAT
> --to-destination 192.168.1.200:80
>
> Should there be anything else?
>
Some minor syntax differences between your example and the howto:

 iptables -t nat -A PREROUTING -d 1.2.3.4 -p tcp --dport 80 -j DNAT --to
192.168.1.1

The above is basically the line my home firewall uses
(http://zuelow.net). The only big difference I see is that you are
Inserting a rule (with no rule number), while the example Appends a
rule. Do you have the nat module loaded on your firewall? Some
distributions don't load it in the default install. `modprobe
iptable_nat`

Cheers,

James

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.



This archive was generated by hypermail 2a23 : Mon Apr 29 2002 - 11:30:23 AKDT