How to use netfilter to do static IP mapping?

Patrick Dung patrick_dkt at
Fri Sep 24 05:24:02 CEST 2004

Dear All

This is what I want:

eth0 as internet (
eth1 as dmz (

dmz has a web ( and dns ( server
with private IP.
The netfilter fw will do the static IP (public to
private) IP mapping.
Avaliable public IP (example): (eth0), (for web), (for dns)

Now I have these rules:

iptables -t nat -A PREROUTING -i eth0 -d -p
tcp --dport 80 -j DNAT --to
iptables -t nat -A PREROUTING -i eth0 -d -p
udp --dport 53 -j DNAT --to

The problem is that there is no response from
Do I need other special setting (proxy arp?)


®öº©¹aÁn  ±¡¤ß³sô*

More information about the netfilter mailing list