On Thursday 01 April 2004 8:30 pm, Adam Kennedy wrote: > This is driving me up a wall. > I have a NAT entry such as thus: > > iptables -t nat -A PREROUTING -d 1.2.3.4 \ > -p tcp --dport 5631 -j DNAT --to 192.168.1.1 What other nat rules do you have? > The thing doesn't work. If I run a telnet session from the NAT box to the > internal machines port of 5631, it responds. But, when doing that from the > outside world, it doesn't. And yes the outside IP is bound to the NAT box, > as eth0:2 actually. Good :) Someone was bound to ask about that :) > Any ideas? Show us the rest of your ruleset (if it's complicated, please try reducing it to the simplest possible which you think should work but still shows the problem). The output from iptables -L -nvx; iptables -L -t nat -nvx would be good. Regards, Antony. -- If builders made buildings the way programmers write programs, then the first woodpecker to come along would destroy civilisation. Please reply to the list; please don't CC me.