RE: [fw-wiz] iptables dnat problem


Hi Michael,

I suspect it's because you haven't specified the destination address.

Maybe try something like the following
iptables -t nat -A PREROUTING -d $SECOND_IP_EXT -p tcp -m tcp --dport
25 -j DNAT --to-destination $SECOND_IP_INT:10025

Luke Butcher
Network/Security Consultant
www.alphawest.com.au

-----Original Message-----
From: Michael [mailto:michael@xxxxxxxxxxxxxxxxxxx]
Sent: Sunday, 5 February 2006 5:30 AM
To: firewall-wizards@xxxxxxxxxxxxxxxxxx
Subject: [fw-wiz] iptables dnat problem

I have a mail daemon running on a border system bound to port 25,
INADDR_ANY

I'd like to run another smtp daemon on a virtual IP address on the same
system. I have the new daemon running on port 10025

iptables -t nat -A PREOUTING -p tcp
-d $SECOND_IP -dport 25 REDIRECT --to-port 10025

The daemon responds just fine to other hosts located on the same /24 as
the localhost, however remote hosts a hop or two away never seem to get
connected. This method seems to work fine for UDP ... I run a second
name server on this host configured as an RBL. Suggestions ???

Michael
_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxx
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

Relevant Pages

  • [fw-wiz] iptables dnat problem
    ... I have a mail daemon running on a border system bound to port 25, ... The daemon responds just fine to other hosts located on the same /24 as ...
    (Firewall-Wizards)
  • php sockets
    ... echo $read; ... i have a daemon running on that port that sends a message when it's got a ... but the script above doesn't output anything it just loads my cpu up to 100 ...
    (php.general)
  • Which daemon is running on port 1109?
    ... On solaris 8 I have some daemon running on port 1109. ... Nico ...
    (comp.unix.solaris)