On Thu, Jan 3, 2013 at 3:37 AM, Jorge Fábregas wrote:
Ok, I've posted a similar setup I've used in the past that worked like a
charm. The script is the actual /etc/sysconfig/iptables. You'll notice
the syntax there is somehow different than when you manually create the
rules (or put in a script) but you get the idea. Those rules WERE THE
MINIMUM required in order to let a machine on internet reach a machine
on the internal network (port 8,555). Ask me any question if you don't
understand a line (please specify line number in question).
eth0 is WAN, eth1 is LAN. Notice how I use "-i" and "-o" for the NICs.
http://fpaste.org/sdPF/
Just to follow up on this, I had nothing but trouble from the portal server. Everything I did seemed to break unrelated stuff and none of it made any sense. It was very frustrating, and that was really why I came here to ask.
Anyway, I finally gave up. To save time and what was left of my sanity, I just installed another server parallel to portal, implemented rules based on your example above, and called it a day. The new server *only* handles the masqueraded connections to the internal server.
Thanks for the tips!
-Alan
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
