On Wed, 2011-10-05 at 12:49 +0100, Chris Percol wrote: > Hi, > I am currently using the following rules on centos iptables to direct > users from a --to-destination to different samba servers. > What is the best approach to take to allow the users of 10.91.0.0 to > also access Samba Server A? I don't understand what you are trying to achieve. There are no filtering rules below, so anybody trying to access Samba Server A will be able to do so anyway? > # Samba Server A > /sbin/iptables -t nat -A PREROUTING -p udp --dport 137 -j DNAT > --to-destination 192.168.1.10 --source 10.90.0.0/16 > /sbin/iptables -t nat -A PREROUTING -p udp --dport 138 -j DNAT > --to-destination 192.168.1.10 --source 10.90.0.0/16 > /sbin/iptables -t nat -A PREROUTING -p tcp --dport 139 -j DNAT > --to-destination 192.168.1.10 --source 10.90.0.0/16 > /sbin/iptables -t nat -A PREROUTING -p tcp --dport 445 -j DNAT > --to-destination 192.168.1.10 --source 10.90.0.0/16 > > # Samba Server B > /sbin/iptables -t nat -A PREROUTING -p udp --dport 137 -j DNAT > --to-destination 192.168.2.10 --source 10.91.0.0/16 > /sbin/iptables -t nat -A PREROUTING -p udp --dport 138 -j DNAT > --to-destination 192.168.2.10 --source 10.91.0.0/16 > /sbin/iptables -t nat -A PREROUTING -p tcp --dport 139 -j DNAT > --to-destination 192.168.2.10 --source 10.91.0.0/16 > /sbin/iptables -t nat -A PREROUTING -p tcp --dport 445 -j DNAT > --to-destination 192.168.2.10 --source 10.91.0.0/16 > > Thanks, > Chris > -- > To unsubscribe from this list: send the line "unsubscribe netfilter" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
