No you don't On Monday 08 September 2003 17:15, Fritz Mesedilla wrote: > Hi Glynn! > > Yes it routes the www packets to the private ip because that it was I use > right now. Since I can't make the nat to work, I tested it by putting a web > server on the firewall itself. So I know the router successfully routes > 202.138.128.xxx to the 192.168.247.3 private ip > > Don't I need to make an snat equivalent? > > fritz <www.mesedilla.com> > --- > + Basta Ikaw Lord > > > -----Original Message----- > > From: Glynn S. Condez [mailto:[EMAIL PROTECTED] > > Sent: Monday, September 08, 2003 4:24 PM > > To: Philippine Linux Users Group Mailing List > > Subject: Re: [plug] iptables > > > > > > > > From: "Fritz Mesedilla" <[EMAIL PROTECTED]> > > > > > 202.138.128.xxx = router-given public ip > > > 192.168.247.3 = firewall local ip that corresponds to > > > > 202.138.128.xxx > > > > > 192.168.247.5 = web server local ip > > > > Hi Fritz, > > > > This works on my setup. > > > > echo 1 > /proc/sys/net/ipv4/ip_forward > > iptables -t nat -A PREROUTING -p tcp -d 192.168.247.3 --dport 80 -j > > DNAT --to 192.168.247.5:80 > > > > Are you sure that your router forward the www packets to the > > private ip > > 192.168.247.3 ? > > > > HTH > > > > -- glynn > > > > >iptables -t nat -A PREROUTING -p tcp -d 192.168.247.3 --dport 80 -j > > > > DNAT --to-destination 192.168.247.5:80> > > > > > I see this: > > > [EMAIL PROTECTED] firewall]# iptables -nvL -t nat > > > Chain PREROUTING (policy ACCEPT 3318K packets, 1243M bytes) > > > pkts bytes target prot opt in out source > > > > destination > > > > > 21 1008 DNAT tcp -- * * 0.0.0.0/0 > > > > 192.168.247.3 tcp dpt:80 to:192.168.247.5:80 > > > > > Pero wala akong natatanggap sa web server na requests. Help naman! > > > > > > Thanks! > > > > > > > > > fritz <www.mesedilla.com> > > > --- > > > + Basta Ikaw Lord > > > > ---------------------------------------------------------------------- > > > > > This email and any files transmitted with it are confidential and > > > intended solely for the use of the individual or entity to whom they > > > are addressed. If you have received this email in error > > > > please notify > > > > > the sender immediately by e-mail and delete this e-mail from your > > > system. Please note that any views or opinions presented in this > > > email are solely those of the author and do not necessarily > > > > represent > > > > > those of the company. Finally, the recipient should check this email > > > and any attachments for the presence of viruses. The company accepts > > > no liability for any damage caused by any virus transmitted by this > > > email. > > > > > > Overture Media, Inc. > > > Direct Line: (632) 635-4785 > > > Trunkline: (632) 631-8971 Local 146 > > > Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. > > > > Ortigas Ave., > > Quezon City 1100 > > > > > -- > > > Philippine Linux Users' Group (PLUG) Mailing List > > > [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) > > > Official Website: http://plug.linux.org.ph > > > Searchable Archives: http://marc.free.net.ph > > > . > > > To leave, go to http://lists.q-linux.com/mailman/listinfo/plug > > > . > > > Are you a Linux newbie? To join the newbie list, go to > > > http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie > > > > --- > > Outgoing mail is certified Virus Free. > > Checked by AVG anti-virus system (http://www.grisoft.com). > > Version: 6.0.515 / Virus Database: 313 - Release Date: 9/1/2003 > > > > -- > > Philippine Linux Users' Group (PLUG) Mailing List > > [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) > > Official Website: http://plug.linux.org.ph > > Searchable Archives: http://marc.free.net.ph > > . > > To leave, go to http://lists.q-linux.com/mailman/listinfo/plug > > . > > Are you a Linux newbie? To join the newbie list, go to > > http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie > > ---------------------------------------------------------------------- > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the sender immediately by e-mail and delete this e-mail from your > system. Please note that any views or opinions presented in this > email are solely those of the author and do not necessarily represent > those of the company. Finally, the recipient should check this email > and any attachments for the presence of viruses. The company accepts > no liability for any damage caused by any virus transmitted by this > email. > > Overture Media, Inc. > Direct Line: (632) 635-4785 > Trunkline: (632) 631-8971 Local 146 > Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave., > Quezon City 1100
-- Alben Benavente Alteza Information Systems Security Administration Information Systems Dept./ Philippine Airlines -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
