Hi Guys:
This is a tcpdump of my attempt to connect to the forwarded telnet port. I
don't know how to read it yet, but I am working on that.
A lot of this is new to me. I appreciate the help and suggestions.
Regards,
Stu........
tcpdump: listening on eth0
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35446259
0,nop,wscale 0> (DF) [tos 0x10] (ttl 64, id 26945, len 60)
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35446559
0,nop,wscale 0> (DF) [tos 0x10] (ttl 64, id 26946, len 60)
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35447159
0,nop,wscale 0> (DF) [tos 0x10] (ttl 64, id 26947, len 60)
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35448359
0,nop,wscale 0> (DF) [tos 0x10] (ttl 64, id 26948, len 60)
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35450759
0,nop,wscale 0> (DF) [tos 0x10] (ttl 64, id 26949, len 60)
tcpdump: listening on eth1
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35446259
0,nop,wscale 0> (DF) [tos 0x10] (ttl 63, id 26945, len 60)
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35446559
0,nop,wscale 0> (DF) [tos 0x10] (ttl 63, id 26946, len 60)
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35447159
0,nop,wscale 0> (DF) [tos 0x10] (ttl 63, id 26947, len 60)
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35448359
0,nop,wscale 0> (DF) [tos 0x10] (ttl 63, id 26948, len 60)
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35450759
0,nop,wscale 0> (DF) [tos 0x10] (ttl 63, id 26949, len 60)
xxx.xxx.xxx.xxx.1167 > 192.168.1.16.telnet: S [tcp sum ok]
1691923634:1691923634(0) win 5840 <mss 1460,sackOK,timestamp 35455559
0,nop,wscale 0> (DF) [tos 0x10] (ttl 63, id 26950, len 60)
xxx.xxx.xxx.xxx is the address of the machine on the Internet I am trying to
connect from.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jack Bowling
Sent: April 7, 2002 10:50 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: terminal services connection
** Reply to message from Stewart Thomspon <[EMAIL PROTECTED]> on Sun,
07
Apr 2002 21:36:57 -0700
> Hi Ian:
>
> I am having the same problems with DNAT and forwarding. So, if you
find a
> solution I would like to hear about it.
> I am using Redhat 7.2 Kernel 2.4.9-31 iptables 2.4.9-31 with the following
> lines in my firewall script. These are the first rules
> and all the remaining rules follow them.
>
> iptables -t nat -A PREROUTING -i EXTIF -s $ANYWHERE \
> -p tcp -d $EXTIP --dport 23 -j DNAT --to $TELNET
Stew - Perhaps it is just syntax. Try "--to-destination $TELNET" instead of
the
short version and see if it works.
jb
--
Jack Bowling
mailto: [EMAIL PROTECTED]
