This:
/sbin/iptables -t nat -A PREROUTING -p tcp -m tcp --dport 3022 \
-j DNAT --to-destination 192.168.0.10:22
doesn't work for me.
Here's what i have right now:
[root@athena init.d]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:auth
ACCEPT tcp -- anywhere anywhere tcp dpt:3022
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
DROP all -- anywhere anywhere state
INVALID,NEW
ACCEPT all -- anywhere anywhere
LOG all -- anywhere anywhere LOG level
warning
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DROP icmp -- anywhere anywhere state
INVALID
[root@athena init.d]# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT tcp -- anywhere anywhere tcp dpt:3022
to:192.168.10.192:22
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
[root@athena init.d]#
from happycake, a machine on the LAN, i get connection time outs
from my job, trying to get to it accross the network, i get connection
time outs.
On Tue, 2003-05-20 at 12:15, David A. Sinck wrote:
>
>
> \_ SMTP quoth Thomas Cameron on 5/20/2003 14:06 as having spake thusly:
> \_
> \_ That's what I was going to answer, but I am not getting it to work...
> \_
> \_ [root@mailtest1 root]# iptables -t nat -A PREROUTING -p tcp -d
> \_ 127.0.0.1 --dport 3022 -j DNAT --to-destination 127.0.0.1:22
> \_ [root@mailtest1 root]# ssh 127.0.0.1 -p 3022
> \_ ssh: connect to host 127.0.0.1 port 3022: Connection refused
> \_
> \_ I have tried to DNAT to a local address as well as another address with the
> \_ same results.
> \_
> \_ What gives?
>
> I'm going to kneejerk that it's some evil local interface problem. I
> know that rule works because it's firing successfully after a few IP
> substitutions. The rule above also faults for me.
>
> \_ > /sbin/iptables -t nat -A PREROUTING -p tcp -m tcp --dport 3022 \
> \_ > -j DNAT --to-destination 192.168.0.10:22
>
> David
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)