Pascal Hambourg a écrit :
Brent Clark a écrit :

[EMAIL PROTECTED] wrote:

iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT

You forgot the FORWARD

i.e. iptables -t filter -A FORWARD --dst 10.30.142.12 -p tcp --dport 80 -J ACCEPT

According to the above, FORWARD default policy is already ACCEPT.

Besides, as FORWARD takes place after PREROUTING which contains the DNAT rule, it should be "--dst 10.30.143.1".

And for completeness, if the default policy was DROP, a second rule matching the return traffic would be necessary.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to