Re: SSH dnat

["Jeroen van Leeuwen" <omzig@xxxxxxxxx>]

are you sure that your server is listening on port 2323?

The rule as i use it is:

iptables -t nat -A PREROUTING -p tcp --dport 2000 -i eth2 -j DNAT --to 10.10.10.1:22

the server is listening on port 22 of 10.10.10.1

reachable from externel on port 2000

 

grtn jeroen

----- Original Message -----

From: Ambor

To: netfilter@lists.netfilter.org

Sent: Sunday, December 01, 2002 6:52 AM

Subject: SSH dnat

Hello everyone,

 

I'm trying to dnat SSH throught the firewall to an internal machine.

 I use following Rule

 

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 2323 -j DNAT --to-destination internal_IP:2323

 

eth0 is connected to internet

 

The problem is that the connection is allrght it just seems that I don't get an answer from the ssh server.

(I'm getting a connection timeout, ot a connection refused)

 

To be sure I don't filter anything, so all trafic is accepted

 

Can someone help me?

 

thx

 

Ronny

 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.422 / Virus Database: 237 - Release Date: 20-11-2002