Terry Gilsenan wrote:
> Hi,
> 
> Change the rule to this..:
> 
> DNAT:info       cmtc    loc:192.168.0.158:23       tcp     8011
> 
> Or change the telnet service on the target machine to listen on port 8011 
> rather than port 23
> 
> ... and another thing to be careful of is that there must be a rout back to 
> the source of the connection from the target of the DNAT rule.

Also, FAQs 1a and 1b provide additional DNAT debugging tips.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to