Please help me, I have become confused with information overload. I want to forward all web traffic to my internal network.

I have a ADSL connection with a static address. I have created the DNS entries so that www.lapthorn.com points to this static address.

The router sends all network traffic to 192.168.0.100 which is my Linux gateway machine running just IPtables. This machine has 2 network cards in it, one that connects to the ADSL router, the other to a switch serving my local machines 10.0.0.0/24 network. I want to forward all network traffic to port 80 from my Gateway machine to Apache running on 10.0.0.100.

Can somebody help. I know this is real simple but can't get my head around it today

The following lines should be in your your firewall startup script.

********************

#1
echo 1 > /proc/sys/net/ipv4/ip_forward

#2
iptables -t nat -A PREROUTING -p tcp -i eth0 -d 192.168.0.100 \
--dport 80 --sport 1024:65535 -j DNAT --to 10.0.0.100:80

#3
iptables -A FORWARD -p tcp -i eth0 -o eth1 -d 10.0.0.100 \
--dport 80 --sport 1024:65535 -m state --state NEW -j ACCEPT

#4
iptables -A FORWARD -t filter -i eth1 -m state \
--state NEW,ESTABLISHED,RELATED -j ACCEPT

#5
iptables -A FORWARD -t filter -i eth0 -m state \
--state ESTABLISHED,RELATED -j ACCEPT

**********************

A short version of how it works is as follows:

#1 enable ip forwarding
#2 nat 192.168.0.100:80 to 10.0.0.100:80
#3 accept the packet that is now headed for 10.0.0.100:80

#4/#5 general rules to allow all traffic out, but only established connections in

Hope this helps.

Good luck.