Re: iptables, DNAT, and SMTP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mar 1 2007 15:41, Brandon Seaver wrote:
>
> Hello,
>
> I've been reading for a couple days now and my mind has gone numb.
>
> I'm hoping to get some help from the community, and I'm sure I'm just
> overlooking something simple. My goal is to forward smtp traffic destined for
> one machine to another based on source.
>
> I have done this: echo 1 > /proc/sys/net/ipv4/ip_forward
>
> I've enabled the loading of iptable_nat in the iptables config file.
>
> This is the base of what I'm using in my /etc/sysconfig/iptables file. Any
> direction on what I'm missing would be greatly appreciated.
>
> *filter
> : INPUT ACCEPT [0:0]
> : FORWARD ACCEPT [0:0]
> : OUTPUT ACCEPT [52442:19228811]
> COMMIT
> *mangle
> : PREROUTING ACCEPT [60986:54771131]
> : INPUT ACCEPT [60982:54770891]
> : FORWARD ACCEPT [0:0]
> : OUTPUT ACCEPT [52445:19228943]
> : POSTROUTING ACCEPT [52445:19228943]
> COMMIT
> *nat
> :PREROUTING ACCEPT [1581:83538]
> -A PREROUTING -s xxx.xxx.66.0/24 -i eth0 -p tcp -d xxx.xxx.64.3 --dport 25 -j
> DNAT --to-destination xxx.xxx.65.15:25
> : POSTROUTING ACCEPT [74:4438]
> : OUTPUT ACCEPT [525:34512]
> COMMIT

Please show us the output of `ip a` and `ip r`.


Jan
-- 


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux