Hi Glynn! Yes it routes the www packets to the private ip because that it was I use right now. Since I can't make the nat to work, I tested it by putting a web server on the firewall itself. So I know the router successfully routes 202.138.128.xxx to the 192.168.247.3 private ip
Don't I need to make an snat equivalent? fritz <www.mesedilla.com> --- + Basta Ikaw Lord > -----Original Message----- > From: Glynn S. Condez [mailto:[EMAIL PROTECTED] > Sent: Monday, September 08, 2003 4:24 PM > To: Philippine Linux Users Group Mailing List > Subject: Re: [plug] iptables > > > > From: "Fritz Mesedilla" <[EMAIL PROTECTED]> > > > 202.138.128.xxx = router-given public ip > > 192.168.247.3 = firewall local ip that corresponds to > 202.138.128.xxx > > 192.168.247.5 = web server local ip > > Hi Fritz, > > This works on my setup. > > echo 1 > /proc/sys/net/ipv4/ip_forward > iptables -t nat -A PREROUTING -p tcp -d 192.168.247.3 --dport 80 -j > DNAT --to 192.168.247.5:80 > > Are you sure that your router forward the www packets to the > private ip > 192.168.247.3 ? > > HTH > > -- glynn > > > > > >iptables -t nat -A PREROUTING -p tcp -d 192.168.247.3 --dport 80 -j > DNAT --to-destination 192.168.247.5:80> > > I see this: > > [EMAIL PROTECTED] firewall]# iptables -nvL -t nat > > Chain PREROUTING (policy ACCEPT 3318K packets, 1243M bytes) > > pkts bytes target prot opt in out source > destination > > 21 1008 DNAT tcp -- * * 0.0.0.0/0 > 192.168.247.3 tcp dpt:80 to:192.168.247.5:80 > > > > Pero wala akong natatanggap sa web server na requests. Help naman! > > > > Thanks! > > > > > > fritz <www.mesedilla.com> > > --- > > + Basta Ikaw Lord > > > > > > > ---------------------------------------------------------------------- > > This email and any files transmitted with it are confidential and > > intended solely for the use of the individual or entity to whom they > > are addressed. If you have received this email in error > please notify > > the sender immediately by e-mail and delete this e-mail from your > > system. Please note that any views or opinions presented in this > > email are solely those of the author and do not necessarily > represent > > those of the company. Finally, the recipient should check this email > > and any attachments for the presence of viruses. The company accepts > > no liability for any damage caused by any virus transmitted by this > > email. > > > > Overture Media, Inc. > > Direct Line: (632) 635-4785 > > Trunkline: (632) 631-8971 Local 146 > > Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. > Ortigas Ave., > Quezon City 1100 > > > > -- > > Philippine Linux Users' Group (PLUG) Mailing List > > [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) > > Official Website: http://plug.linux.org.ph > > Searchable Archives: http://marc.free.net.ph > > . > > To leave, go to http://lists.q-linux.com/mailman/listinfo/plug > > . > > Are you a Linux newbie? To join the newbie list, go to > > http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie > > > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.515 / Virus Database: 313 - Release Date: 9/1/2003 > > -- > Philippine Linux Users' Group (PLUG) Mailing List > [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) > Official Website: http://plug.linux.org.ph > Searchable Archives: http://marc.free.net.ph > . > To leave, go to http://lists.q-linux.com/mailman/listinfo/plug > . > Are you a Linux newbie? To join the newbie list, go to > http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie > ---------------------------------------------------------------------- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender immediately by e-mail and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. Overture Media, Inc. Direct Line: (632) 635-4785 Trunkline: (632) 631-8971 Local 146 Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave., Quezon City 1100 -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
