by MJ » Sat, 07 Dec 2002 05:52:55
PORTFWIP="192.168.0.10"
$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport 21 -m state \
--state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport 21 \
-j DNAT --to $PORTFWIP:21
Problem - conenction time out..
any comments?
1. Port forwarding, NAT and LAN-to-LAN connections
Hello all,
Here's a stumper. I'm using Debian 2.2 and ipchains to set up a bunch
of services running on a LAN with only one external host doing
port-by-port forwarding to the hosts on the LAN. So,
External IP 24.68.84.12:80 forwarded to --> 192.168.1.2:80
and
External IP 24.68.84.12:25 forwarded to --> 192.168.1.2:25
With a couple of simple statements to ipmasqadm:
ipmasqadm portfw -f
ipmasqadm portfw -a -P tcp -L 24.68.84.12 80 -R 192.168.1.2 80
ipmasqadm portfw -a -P tcp -L 24.68.84.12 25 -R 192.168.1.2 25
this works like a charm in all cases but one-- when the connection is
initiated from a host inside of the LAN. So, if host 192.168.1.10
tries to connect to 24.68.84.12:80, nothing happens. tcpdump shows
that packets are flying about, but the connection is never officially
opened.
I suspect that this has to do with the way that MASQ works in linux,
but I am not sure. I have scoured this list and it seems that the only
thing that comes close in posting is this post:
http://groups.google.com/groups?hl=en&threadm=3a1a4b0e.0%40d2o68.teli...
but there was never an acceptable resolution. Using DNS to
short-circuit the firewall's NAT seems kludgey.
Any help would be greatly appreciated.
Antonio
PS the rest of my rules are set as promiscous as possible for the
purposes of solving this problem:
ipchains -F
ipchains -P input ACCEPT
ipchains -P output ACCEPT
ipchains -P forward ACCEPT
ipchains -P forward -s 192.168.1.0/24 -j MASQ
and everything else (NAT, forwarding from an external address) is
working jsut fine.
2. QUERY:- Open source for mini-pci
3. IP-Forwarding PPP-LAN but not LAN-LAN
4. modprobe: Can't locate module sr_mod
7. FTP: 425 Can't build data connection: Connection timed out.
8. Anybody succesfully compiled a CD-R capable 2.4.x kernel?
9. ftp problem LAN behind NAT/fierwall to LAN
10. ftp forwarding to inside lan
11. LAN (telnet) connection takes LONG time to login!
12. Forwarding data FTP connection - doesn't work
13. Delays between connection and login on FTP and Telnet over Ethernet LAN