Problemy s presmerovanim pomoci iptables a DNAT

[Dalibor Straka]

On Mon, Sep 22, 2003 at 01:16:40PM +0200, Roman LISZKA wrote:
> Michal Kubecek napsal(a):
> 
> > V tom dumpu se tak úplně nevyznám, ...
> 
> Tak tady prikladam ekvivalentni prikazy:
> 
> ETH0="1.1.1.163"
> 
> iptables -P INPUT DROP
> iptables -P FORWARD ACCEPT
> iptables -P OUTPUT ACCEPT
> 
> iptables -t nat -A PREROUTING -d $ETH0 -p tcp -m tcp --dport 25 -j DNAT 
> --to-destination 192.168.2.3:25
> iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> 
> iptables -A INPUT -i lo -j ACCEPT
> iptables -A INPUT -i eth1 -j ACCEPT
> iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
> iptables -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
> iptables -A INPUT -p icmp -m icmp --icmp-type 3 -j ACCEPT
> iptables -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
> iptables -A INPUT -p icmp -m icmp --icmp-type 11 -j ACCEPT
> iptables -A INPUT -i eth0 -p tcp -m tcp --dport 25 -j ACCEPT
> iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
> iptables -A FORWARD -i eth1 -j ACCEPT
> iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
> 
> S pozdravem
>     Roman LISZKA
> 

Mozna by bylo dobre vymazat vsechny chainy, hlavne nat! A pak pridavat
pravidla postupne + logy.

-- Dalibor Straka
PS: K obedu jsem mel bramboracky, mnam.