I am trying to set up a router to handle all traffic coming into my network. I have an internal Web server running and want all Web traffic to go to it. I also need the router to do masquerading and firewalling. I have a fairly extensive firewall script that does everything but the port forwarding. The rules for port forwarding are included in the script and I have them running but I cannot get Web requests to go through the router and to my internal Web server. I do have apache installed on the router. When apache is running it grabs all port 80 requests (like it should) but when it is disabled I get nothing through the router. Any help would be greatly appreciated!!

What do your rules look like? For just forwarding one port I use something like this:

iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth0 -j DNAT --to 192.168.10.2

Here is the line for the prerouting in my firewall script.

$IPTABLES -A PREROUTING -t nat -i $EXTERNALIF -p tcp -d $MYADDR --dport 80 -j DNAT --to 192.168.2.5:80

($IPTABLES is the call to iptables, $EXTERNALIF is eth0, $MYADDR is the public firewall ip address).

I have only tried to see if this works from inside my network (i.e. I have not tried from someone else's network). Could there be something else that is preventing me from getting through the router?

Thanks!