NAT, 2 boxes 1 in private network, is config correct? Diagram enclosed.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,
I have 1 connection to the Internet(2XX.100.20.10). 1 hub, 1 firewall, 1 box in private network.

The firewall has 3 NIC cards, eth0,eth1,eth2. I can't reach the private network using ssh. I have
ssh running on the firewall on port 1229. Firewall has the NAT rule. Ssh is also running on the
private network box(target). The firewall has port 1229 open and listening(verified).

./iptables -t nat -A PREROUTING -p tcp 1229 -i eth0 -j DNAT -to 192.168.10.100:22

Does anyone know why this would not work? My OS is Ferora Core1, all patched up.

Thank-you!

(Make believe routable IP addresses to protect the innocent)

     ------------------------------
    |                              |
    |            eth0  Nic Card 1 -|-- 2XX.100.10.14 --------->  gateway 2XX.100.20.10
    |            eth1  Nic Card 2 -|-- 2XX.100.10.15 ------->  | gateway 2XX.100.20.10
    |            eth2  Nic Card 3 -|-- 2XX.100.10.16 ----->  | | gateway 2XX.100.20.10
    |                              |                       | | |                       
    | Router/Firewall/etc box      |                       | | | 
     ------------------------------                        | | |
                                                           | | |
                       --------<--------<-----------------<| | |
                      |   ------<-----------<---------------<| |
                      |  |   ------<-----------<--------------<|
                      |  |  |     
 to/from providors    |  |  |
 gateway(Main         |  |  |
 Internet connection) |  |  |
 | 2XX.100.20.10      |  |  |
 |                    |  |  |
 |------------->|     |  |  |
               ----------------
              |                |
              |  8 Port HUB    |
               ----------------
                     |  |  |
                     |  |   -<-----------------<--------------<|
                     |   ---<---------------<---------------<| |
                      ----<-------------<-----------------<| | |
                                                           | | |
     ------------------------------                        | | |
    |                              |                       | | |
    |           eth0   Nic Card 1 -|-- 192.168.10.100 ---->| | | gateway 2XX.100.10.14
    |           eth1   Nic Card 2 -|-- 192.168.10.101 ------>| | gateway 2XX.100.10.14
    |           eth2   Nic Card 3 -|-- 192.168.10.102 -------->| gateway 2XX.100.10.14
    |                              |                                              
    | SSH/ Web Server/ Database/   |  
    | misc applications            |
     ------------------------------ 

__________________________________
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online.
http://taxes.yahoo.com/filing.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux