Re: DNAT: Unable to Forward Ports, Why?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



--- "Kevin D. White" <web_crcrawlzahoo.com> wrote:
> Are you getting any connection attempts on the web
> host?  Log the packets for port 80 in FORWARD and
> INPUT, try and track the packet as it moves through
> the tables.

HmHmmmI don't seem to be getting any hits, unless I
set up logging incorrectly. I set it up as :

# Log all attempts to connect to port 80
$IPIPTI FORWARD 3 -p tctcp-dpdport0 -j LOG \  
 --log-prefix "**FORWARD CHAIN PORT 80 TCP**"
$IPIPTI INPUT -p tctcp-dpdport0 -j LOG --log-prefix \
 3"**INPUT CHAIN PORT 80 TCP**"
# Forward port 80
$IPIPTA FORWARD -d $EXT_IPIPp tctcp-dpdport0 -j ACCEPT
$IPIPTt nanatA PRPREROUTINGp tctcp-dpdport0 \
 -d $EXT_IPIPj DNDNAT-to-destination 192.168.1.2:80


	
		
__________________________________
Do you Yahoo!?
Friends.  Fun.  Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/ 


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux