I've found the right rules: iptables -t nat -A PREROUTING -p tcp -m tcp --dport 50002 -j DNAT --to-destination 192.168.1.3:22 iptables -t nat -A POSTROUTING -p tcp -m tcp -d 192.168.1.3 --dport 22 -j SNAT --to-source 192.168.1.2:50002 iptables -P FORWARD ACCEPT Now works. Thanks. Fabrizio 2008/9/3 Fabrizio Regalli <fabreg@xxxxxxxxx>: > Hi list. > > I have a router "closed" and I can't using PAT but I need to forward > the ssh port to another external port (50002) > My router is 192.168.1.1 > My server is 192.168.1.2 > My client is 192.168.1.3 > In other words I need to forward the ssh port of 192.168.1.3 to server ip:50002 > > For PREROUTING rule I suppose this is right: > > iptables -t nat -A PREROUTING -p tcp -m tcp --dport 50002 -j DNAT > --to-destination 192.168.1.3:22 > > For POSTROUTING rule, I need an help. I'm trying in this way: > > iptables -t nat -A POSTROUTING -p tcp -m tcp -d 192.168.1.2 --dport 22 > -j SNAT --to-source 192.168.1.2:50002 > > But unfortunately it doesn't work. > > Could please someone give me a suggest for POSTROUTING rule? > > Thanks in advance. > -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
