[ale] I'm an iptables idiot

Frank S. Glass glass at holos.com
Thu Mar 11 12:35:19 EST 2004


Make sure that you also have a filter table rule for the port.  After the
PREROUTING nat chain a packet still must pass through the filter table.  

Frank

Quoting "Michael D. Hirsch" <mhirsch at nubridges.com>:

> What am I doing wrong?  I'm trying to forward port 2402 on one system to 
> port 2401 on another.  This should be easy.
> 
> According to google, the solutions is the obviosu one, something like:
> iptables -A PREROUTING -t nat -p tcp  --dport 2402 -j DNAT --to  \
>            10.0.25.52:2401
> 
> In my searching I came across a bunch of folks who tried the obvious 
> solution, it didn't work, so they asked the same question I'm asking.  
> The responses were all variations on "You should try the obvious 
> solution."
> 
> I believe forwarding is turned on:
> # cat /proc/sys/net/ipv4/ip_forward
> 1
> 
> Suggestions?  I've gotta believe I'm missing something stupid.
> 
> Thanks,
> 
> Michael
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
> 
> 


-- 
Frank S. Glass
Holos Software, Inc.
770.496.1877

-------------------------------------------------
Holos Software, Inc. http://holos.com



More information about the Ale mailing list