SetiQ / Linux IPTables

General Computing *nix and other operating systems
1

Okay, I need help!

I need an “idiots” guide to forwarding port 5517 to my pc on 192.168.0.2 and for replies to go out okay too.

so far I have

4.2.4 PREROUTING chain

#SETIQ
$IPTABLES -t nat -A PREROUTING -p TCP --dport 5517 -j DNAT --to-destination 192.168.0.2:5517

4.2.5 POSTROUTING chain

#SETIQ
$IPTABLES -t nat -A POSTROUTING -p TCP --sport 5517 -j SNAT --to-source $IP:5517

no ideas where I’m going wrong.

Please help ???

2

bump

edited the above… if you want more WU’s added to the TPR total - help me out!

I’ve got the offer of multiple GHz power waiting to be tapped :wink:

3

Erm, sorry I missed this post. Thought I would post here as well as the PM…

I’ve only messed with it a couple of times… here is my best guess…

iptables -t nat -A PREROUTING -p tcp --dport 5517 -i eth0 -j DNAT --to 1.2.3.4

Where 1.2.3.4 is ip address of the pc on your lan. Note that you must be able to ping 1.2.3.4 from you router. Hope this helps.

Let me know

Andy

4

Originally posted by Spaceboy
[B]Okay, I need help!

I need an “idiots” guide to forwarding port 5517 to my pc on 192.168.0.2 and for replies to go out okay too.

so far I have

4.2.4 PREROUTING chain

#SETIQ
$IPTABLES -t nat -A PREROUTING -p TCP --dport 5517 -j DNAT --to-destination 192.168.0.2:5517

4.2.5 POSTROUTING chain

#SETIQ
$IPTABLES -t nat -A POSTROUTING -p TCP --sport 5517 -j SNAT --to-source $IP:5517

no ideas where I’m going wrong.

Please help ??? [/B]

i assume this is part of a script where the variables ($IPTABLES, $IP etc) are defined?

here’s a bit of my iptables script i use to forward RDC through…


iptables -t nat -A PREROUTING -i <external interface> -p tcp --dport 3389 -j DNAT --to 192.168.0.1:3389
iptables -A FORWARD -i <external interface> -p tcp --dport 3389 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

you’d probably want


iptables -t nat -A PREROUTING -i <external interface> -p tcp --dport 5517 -j DNAT --to 192.168.0.2:5517
iptables -A FORWARD -i <external interface> -p tcp --dport 5517 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

<external interface> being eth0/1, whichever is external

5

Thanks Lucifer[OCS], I knew someone who knew about iptables would eventually post. Welcome to the forums.

6

just spotted this! cheers guys! :slight_smile:

I’ll try it out tonight and let ya know :thumbsup:

7

Lucifer :worship:

it was the 2nd line I needed! Just tested and it’s all go! :smiley:

THANKYOU !!!

8

hey dont I get any credit for being the guinea pig…

DT.

9

hehe sorry mate.

your testing was much appreciated at 00:30 last night/this morning :smiley:

thanks again chap :thumbsup:

10

Originally posted by Spaceboy
[B]Lucifer :worship:

it was the 2nd line I needed! Just tested and it’s all go! :smiley:

THANKYOU !!! [/B]

glad it worked :slight_smile: