pb : iptables - redirection - prerouting

marquis@xxxxxxxxxxxxxx · Sun, 2 May 2004 23:04:30 -0500 (CDT)

Hello

The configuration of my network is the next:

                      INTERNET
                         I
                         I ppp0
                         I
                      FW(linux)
               eth0  /         \ eth1
                    /           \
                   /             \
           192.168.0.25       192.168.1.36

The FW is a linux mandrake red hat.

I have installed an ftp server on 192.168.0.25 port 6666 mode PASV.
I can connect myself from 192.168.1.36 with giving 192.168.0.25 as server IP.
I cannot connect myself from 192.168.1.36 giving one of the FireWall IPs.
Normal ! I must use prerouting utility to redirect packets.
To do prerouting of anyone to my ftp server (192.168.0.25), I do this :

$IPTABLES -A FORWARD -p tcp --dport 6666 -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 60100:60200 -j ACCEPT

$IPTABLES -A PREROUTING -t nat -p tcp --dport 6666 -j DNAT
--to-destination 192.168.0.25
$IPTABLES -A PREROUTING -t nat -p tcp --dport 60100:60200 -j DNAT
--to-destination 192.168.0.25

but it doesn't work : I can even not connect to the ftp server !

Could you help me ?

Thanks for reading ...

Xavier