how to allow a port in fedora firewall

mukeshk.nist · 01-28-2010, 05:26 AM

hi all,
i am a newbie to fedora|linux,i have to deal with reverse proxy issue and want to access few LAN devices having port 5900 and 9999,can anybody help me what exact steps i have to follow to allow this port in fedora firewall.
thanks
mukesh

nimnull22 · 01-28-2010, 10:15 AM

Do you want to access a LAN devices or fedora firewall?

mukeshk.nist · 01-29-2010, 02:42 AM

hi nimnull
i have few lan configured devices which can be controlled over internet and i have one real ip and all lan devices have an ip local to the LAN,i want to redirect any external request to lan devices and output of devices to that end user something called reverse proxy.

nimnull22 · 01-29-2010, 10:38 AM

So, if ext_eth - is looking to router and int_eth is looking to LAN, then you need rules:

Code:

iptables -t nat -A PREROUTING -p tcp -d <IP_ext_int> --dport <YOUR_PORT> -j DNAT --to-destination <IP_int_eth>:<PORT>
iptables -t nat -A FORWARD -i ext_eth -o int_eth -j ACCEPT
iptables -t nat -A FORWARD -o ext_eth -i int_eth -j ACCEPT
echo "1" > /proc/sys/net/ipv4/ip_forward

After this, if you will connect to your ext_eth:50000 (for ex.) packets will be forwarded to <IP_int_eth>:<PORT>
If you would like to add more security and check source IP address of request, you need to add it to forward chain.

Something like this.