Antony I gave
$IPTABLES -t nat -A PREROUTING -d a.b.c.d -p tcp --dport 80 -j DNAT --to 192.168.0.3 a whirl but no joy, although the onnection request tqkes muck longer to time out ? So we have [198.168.0.3] make a request on [198.168.0.1] the gateway which is MASQ to [a.b.d.c] the ext IP of the firewall. The DNS lookup returns [a.b.d.c] which is Postrouted DNAT mapped to [198.168.0.3] Am I right I thinking that the source address is that of the gateway [198.168.0.1] , which is why I get no response ? echo " clearing any existing rules and setting default policy.." $IPTABLES -P INPUT ACCEPT $IPTABLES -F INPUT $IPTABLES -P OUTPUT ACCEPT $IPTABLES -F OUTPUT $IPTABLES -P FORWARD DROP $IPTABLES -F FORWARD $IPTABLES -t nat -F $IPTABLES -A INPUT -p tcp --syn --destination-port 80 -j ACCEPT $IPTABLES -A INPUT -p tcp --syn -j DROP $IPTABLES -A FORWARD -i $EXTIF -o $INTIF -j ACCEPT $IPTABLES -A FORWARD -i $INTIF -o $EXTIF -j ACCEPT $IPTABLES -A FORWARD -j LOG $IPTABLES -t nat -A PREROUTING -p tcp -i eth0 --dport 80 -j DNAT --to-destination 192.168.0.3:80 $IPTABLES -t nat -A PREROUTING -d a.b.c.d -p tcp --dport 80 -j DNAT --to 192.168.0.3 $IPTABLES -t nat -A POSTROUTING -o $EXTIF -j MASQUERADE echo -e "\nrc.firewall-2.4 v$FWVER done.\n" Where where a.b.c.d is the ext IP of the firewall. Still won't connect from an IP request on 192.168.0.3 ? It requires a rule simply to act as a loopback but first going by the external ip to obtain the external dns IP which is a.b.c.d.
