Incearca asa:

iptables -A FORWARD -p tcp -d IP_INTERN --dport 80 -o 
$INTERFATA_IP_INTERN -j ACCEPT
iptables -t nat -A PREROUTING -p tcp --dport 7777 -i lo -j DNAT 
--to-destination IP_INTERN:80
iptables -t nat -A PREROUTING -p tcp -d $EXT_IP --dport 7777 -j DNAT 
--to-destination IP_INTERN:80

Incearca apoi din exterior : telnet server 7777 si vezi ce zice.

PS: este iptables -L -t nat pentru ceea ce vrei sa faci.

[EMAIL PROTECTED] wrote:

>eth1-interfata cu exteriorul
>eth9-interfata cu local network 
>Am executat 
>#iptables -F
>#iptables  -A PREROUTING -j DNAT -t nat -p tcp --dport 7777 -i eth1 --to
>ip_local:80
>#iptables -L
>Chain INPUT (policy ACCEPT)
>target     prot opt source               destination         
>
>Chain FORWARD (policy ACCEPT)
>target     prot opt source               destination         
>
>Chain OUTPUT (policy ACCEPT)
>target     prot opt source               destination         
>#lsmod
>Module                  Size  Used by    Not tainted
>ipt_REDIRECT            1728   2 (autoclean)
>ipt_multiport           1632   0 (autoclean)
>ipt_REJECT              4096   0 (autoclean)
>sd_mod                 12928   0 (autoclean) (unused)
>scsi_mod              108608   1 (autoclean) [sd_mod]
>ipt_MASQUERADE          2464  11 (autoclean)
>iptable_nat            21012   1 (autoclean) [ipt_REDIRECT ipt_MASQUERADE]
>ipt_state               1536   0 (autoclean)
>ip_conntrack           21164   2 (autoclean) [ipt_REDIRECT ipt_MASQUERADE
>iptable_nat ipt_state]
>iptable_filter          2752   0 (autoclean)
>ip_tables              13984   9 [ipt_REDIRECT ipt_multiport ipt_REJECT
>ipt_MASQUERADE iptable_nat ipt_state iptable_filter]
>......
>ma duc pe un comp din exterior si dau 
>#links http://ip_real:7777
>imi apare o fereastra cu conection refused
>Care e problema?
>Mersi
>

---
George Tolea
Grup Administrare Retea Locala
INMH Bucuresti
http://www.inmh.ro


---
Pentru dezabonare, trimiteti mail la 
[EMAIL PROTECTED] cu subiectul 'unsubscribe rlug'.
REGULI, arhive si alte informatii: http://www.lug.ro/mlist/


Raspunde prin e-mail lui