On Dec 20, 2004, at 05:22, Jason Opperisano wrote:
well--you provide pretty much zero detail, so i'm going to have to put my funny-looking kreskin hat on...
Really? I thought I put a lot of info in there. Please tell me what else would have helped, so that I may do better next time.
the powers-that-be are telling me that you (like many other people that as this question), did not specify "-i $OUTSIDE_IF" in your PREROUTING nat rule, and therefore packets that arrive inbound on the inside interface match and disappear into the ether.
iptables -t nat -A PREROUTING -i $OUTSIDE_IF -p tcp \ -d $OUTSIDE_IP --dport 6969 -j DNAT --to-destination $INSIDE_HOST
Ah! Yes, this sounds very plausible. I appreciate the advice!
-- Rick