On Mon, October 31, 2005 08:58, Buddy wu wrote: > -A PREROUTING -d Inet1 -p tcp -m tcp --dport 6100 -j DNAT > --to-destination 192.168.16.21:6100 > -A PREROUTING -d Inet1 -p tcp -m tcp --dport 80 -j DNAT > --to-destination 192.168.16.114:80 ... > -A PREROUTING -d Inet1 -p tcp -m tcp --dport 8087 -j DNAT > --to-destination 192.168.16.100:8087 > > these are the rules in PREROUTING. the Inet1 replaced for the > internet address. Now it only can connect to Inet1:80 through the > internet. and others like :Inet1:8083 can't be accessed. > It worked months ago . but now it don't work anyway Has anything changed in the FORWARD chain ? You need to allow it there. Gr, Rob
