I have a network with Windows 2k3 server inside connecting to a Linux Firewall. I setup the iptables to masquerade. Works fine. The firewall also pass web request to the 2k3 from the internet side. But if I want use IE to browse back the webserver in the internal network. It fails. Internet ---- (WAN IP) Linux Firewall (192.168.3.2) ---- (192.168.3.103) win2k3 The iptables rule file is : *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :UA-ACCEPT - [0:0] -A INPUT -j UA-ACCEPT -A UA-ACCEPT -i lo -j ACCEPT -A UA-ACCEPT -i eth1 -p tcp --dport 22 -j ACCEPT -A UA-ACCEPT -m state --state ESTABLISHED,RELATED -j ACCEPT -A UA-ACCEPT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -p tcp -m tcp -m state --state ESTABLISHED,RELATED --dport 80 -j ACCEPT COMMIT *nat :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to 192.168.3.103 -A POSTROUTING -o eth0 -j MASQUERADE I also tried to put : iptables -t nat -A PREROUTING -d 1.2.3.4 -p tcp --dport 80 -j DNAT --to 192.168.3.103 where 1.2.3.4 assumed to be WANIP Also failed. Any clue? Thanks, Leo
