Re: DNAT

[Primero <primero@xxxxxxxxxxxxx>]

Payal Rathod wrote:

> Hi,
> I want to access my internal machine from outside. But I am unable to do 
> so. I tried,
> # iptables -t nat -I PREROUTING -d <my_ext_ip> -p tcp --dport
> 8081 -j DNAT --to-destination 192.168.0.16:80
> # iptables -I INPUT -p tcp --dport 8081 -j ACCEPT
>  
the one above is useless because the INPUT chain in this case is not 
traversed.

> # iptables -I FORWARD -s 192.168.0.16 -j ACCEPT
>  
This one is the one u need ... but u have to make the check on 
destination and not on source so
#iptables -I FORWARD -d 192.168.0.16 -j ACCEPT

> With warm regards,
> -Payal
>
>  
bye :)


--
---------------------------------------
#######################################

"Linux, the choice of a GNU generation"
    ==Micro$oft - just say NO== 

#######################################
---------------------------------------

Attachment: signature.asc
Description: OpenPGP digital signature