Re: iptables + pptp + special case
- From: Ansgar -59cobalt- Wiechers <usenet-2007@xxxxxxxxxxxxxxxx>
- Date: 13 Mar 2007 15:44:32 GMT
merrittr <merrittr@xxxxxxxxx> wrote:
I have a site with the iptables rules below (12/3/07 I added)[...]
currently the firewall is set to forward all tcp:1723 and all GRE to
the internal VPN server.
However they need one PC inside the org connect to a outside VPN I
added the rules (12/3/07) hoping to add a special case whereby any
tcp:1723 and GRE from STRATOS_SERVER(12.23.94.89) should be forwarded
to the STRATOS_CLIENT PC. However my iptables logic doesn't seem to
add up can anyone shed some light to what might be the hang up?
#
# outgoing to stratos VPN added 12/3/07
#
iptables -A PREROUTING -t nat -p tcp -d ${STRATOS_SERVER} --dport 1723
-j DNAT --to ${STRATOS_CLIENT}:1723
iptables -A FORWARD -p tcp -d ${STRATOS_CLIENT} --dport 1723 -o eth1
-j ACCEPT
iptables -A PREROUTING -t nat -p 47 -d ${STRATOS_SERVER} -j DNAT --to
${STRATOS_CLIENT}
iptables -A FORWARD -p 47 -d ${STRATOS_CLIENT} -o eth1 -j ACCEPT
For outbound connections you need SNAT, not DNAT.
http://www.netfilter.org/documentation/HOWTO//NAT-HOWTO-6.html#ss6.1
cu
59cobalt
--
"If a software developer ever believes a rootkit is a necessary part of
their architecture they should go back and re-architect their solution."
--Mark Russinovich
.
- References:
- iptables + pptp + special case
- From: merrittr
- iptables + pptp + special case
- Prev by Date: iptables + pptp + special case
- Next by Date: Re: Destination Port 3171
- Previous by thread: iptables + pptp + special case
- Index(es):
Relevant Pages
|
