I know this shouldn't be this hard

[Antony Stone]

On Tuesday 25 June 2002 6:33 pm, Stephanie_Martinez@Dell.com wrote:

> Antony,
>
> Thanks for the help.  Everyting imputs fine ecept the last one.  Where I
> was getting an error about state.  SO I checked the man files to see what
> -m state might be doing and can't find it referenced.  Is there an error in
> there somewhere?

No, it's correct, however you might not have support for the 'state' match 
compiled in.   I would recommend it as being a Very Good Thing, however it's 
not essential so long as you substitute other rules to allow the reply 
packets back again.

Try instead:

iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 2000 -j DNAT --to
192.168.0.101:5000
iptables -A FORWARD -i eth0 -d 192.168.0.101 -p tcp --dport 5000 -j ACCEPT
iptables -A FORWARD -i eth1 -s 192.168.0.101 -p tcp --sport 5000 -j ACCEPT

 

Antony

> -----Original Message-----
> From: Antony Stone [mailto:Antony@Soft-Solutions.co.uk]
> Sent: Tuesday, June 25, 2002 12:16 PM
> To: netfilter@lists.samba.org
> Cc: Stephanie_Martinez@exchange.dell.com
> Subject: Re: I know this shouldn't be this hard
>
> On Tuesday 25 June 2002 6:09 pm, Stephanie_Martinez@Dell.com wrote:
> > what I'm looking to do
> > is forward a port from one box to another.
> >
> > eth0 is my internet connection and is a dynamic ip so trying to stear
>
> clear
>
> > of anythig that requires an ip on it
> >
> > eth1 is my internal network on the linux box and runs on ip 192.168.0.1
> > 192.168.0.101 is the ip of the machine with the service i want to run
> >
> > As hptotetical examples so that I can be sure I can  understand which is
> > which, lets say I want to forward any incomming connection to port 2000
> > on the linux box (which would come in on eth0), to port 5000 on
> > 192.168.0.101 (the windows machine).
>
> iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 2000 -j DNAT --to
> 192.168.0.101:5000
> iptables -A FORWARD -i eth0 -d 192.168.0.101 -p tcp --dport 5000 -j ACCEPT
> iptables -A FORWARD -i eth1 -m state --state ESTABLISHED, RELATED -j ACCEPT
>
>
>
> Antony.