Hi iptables gurus
could someone assume the lotus position and tell me how to reverse nat
properly
iptables -t nat -A POSTROUTING -d 208.185.9.1 -s 208.185.9.0/24 -p tcp
--dport 18245 -j SNAT --to 208.185.9.236
I am trying to map a private side address (208.185.9.0/24 I know I know
its not a IEEE non-routable but anyway that is set up as a private side)
any TCP coming in for port 18245 needs to goto 208.285.9.236 , which
doesn't have a gateway on it , and I need the packet edited toi say the
source addr is the NATting router 208.185.9.1 (backend) 128.233.18.148
frontend does my above command look valid? If so how do I see that its
being used iptables -L doesn't show it?
more pertinent info:
rp# uname -a
Linux rp 2.4.30 #2 Thu May 5 03:57:22 EDT 2005 i686 unknown
rp# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
remote-admin all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
DROP all -- anywhere anywhere state
INVALID
DROP all -- anywhere anywhere state NEW
Chain FORWARD (policy ACCEPT)
target prot opt source destination
access-acl all -- anywhere anywhere
autofw-acl all -- anywhere anywhere
portfw-acl all -- anywhere anywhere
user-filter all -- anywhere anywhere
port-filter all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
DROP all -- anywhere anywhere state
INVALID
DROP all -- anywhere anywhere state NEW
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain access-acl (1 references)
target prot opt source destination
Chain autofw-acl (1 references)
target prot opt source destination
Chain port-filter (1 references)
target prot opt source destination
Chain portfw-acl (1 references)
target prot opt source destination
Chain remote-admin (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp
spts:1024:65535 dpt:99
ACCEPT icmp -- anywhere anywhere icmp
echo-request
Chain user-filter (1 references)
target prot opt source destination
rp#
Received on Mon Oct 15 14:48:11 2007
This archive was generated by hypermail 2.1.8 : Mon Oct 15 2007 - 14:48:18 CST