-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all. I'm trying to setup iptables, so that if I connect to localhost port xxx, the connection will be redirected to a machine on my internal lan on the same xxx port. So, what I've put into my firewall script is: iptables -t nat -A PREROUTING -p tcp -i lo --dport xxx -j DNAT - --to-destination 192.168.0.4 all on one line of course, and where xxx is a valid tcp port number. However, when I telnet to localhost xxx, I get "trying 127.0.0.1", and then "connection refused", even though I am able to telnet to 192.168.0.4 on port xxx without a problem. I also know for a fact that the above line works just fine if I want to expose ports from machines on my internal network to the outside world, using eth0 instead of lo in those scenarios of course. So, Can someone please tell me what I'm missing? Is it possible perhaps that lo cannot be treated in the same way that eth0, my outside interface, and eth1, my lan interface are treated? Thanks in advance for any help. Greg - -- web site: http://www.romuald.net.eu.org gpg public key: http://www.romuald.net.eu.org/pubkey.asc skype: gregn1 (authorization required, add me to your contacts list first) - -- Free domains: http://www.eu.org/ or mail dns-manager at EU.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGAh+q7s9z/XlyUyARAmPvAKCKhLE4V26PNAo8tdGfoygtfpMsQACgxqLu 8s4rfz3Cvw7skcCDtcaaiM4= =17oE -----END PGP SIGNATURE-----
