On Mon, 23 Feb 2004, Helio L. Filho wrote:

>
>  I have a problem using DNAT rule :
>     I'm trying to routing a request on port 9000 in the firewall and send to
> an internal host on port 80 .
>
> the rule i've set
>
> ACCEPT net fw tcp 9000
> ACCEPT net loc:192.168.1.40   tcp     www
>
> DNAT net    loc:192.168.1.40    tcp     80     9000   200.221.x.x
> what's wrong ? i cannot be conected from external word . !!
>

This is FAQ #1c.

The rule you want is:

ACCEPT  net loc:192.168.1.40:80 tcp 9000 - 200.221.x.x

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to