AW: need help with iptables Port forwarding

From: vogt@hansenet.com
Date: 10/02/01


Message-ID: <2D5914BDC6D4D411998200008368A2C8B6FDE2@HEW01EXHN1.hew.de>
From: vogt@hansenet.com
To: delusi0n@bellsouth.net, focus-linux@securityfocus.com
Subject: AW: need help with iptables Port forwarding
Date: Tue, 2 Oct 2001 15:05:31 +0200 


> # iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 5500 \
> -j DNAT --to-dest 192.168.0.11
>
> it goes through without any errors, but when i try to connect
> to the service
> usign my external ip it says Host Refused connection. i also
> tried port
> scanning for this port, and it doesnt find it. Please help me
> solve this ASAP.

remember that the packet will still traverse the normal chains (especially
FORWARD), so you have to make sure it isn't rejected there.