iptables portforwrding

OpsVentus · 05-09-2004, 09:27 AM

I know this has been asked and asked again but it dosn't work.

I want to forward ports to my network and been trying this:
iptables -t nat -A PREROUTING -p tcp -i eth1 -d 62.195.129.15 --dport 21 -j DNAT --to 192.168.7.6:21

iptables -A FORWARD -i eth1 -p tcp --dport ftp -d 192.168.7.6 -j ACCEPT

eth1 is my internet connection 62.195.129.15 is my internet-ip 192.168.7.6 is my ip-adres of a computer on the network.
And I want to run a ftp-server from there.

Can anyone find the problem?

dorian33 · 05-09-2004, 11:27 AM

Your rules are ok for incoming traffic. But you need a POSTROUTING & FORWARD rules for the packets from the ftp server.

OpsVentus · 05-10-2004, 02:31 AM

And how do I do that?
Do I have to do that on the computer with the ftp-server?

In my log from the ftp-server(leechftp) I see connected/disconnected message when I connect.

is this it?
iptables -t nat -A POSTROUTING -d 192.168.7.6 -p tcp --dport 21 -j SNAT --to 192.168.7.1

maxut · 05-10-2004, 03:29 AM

iptables -t nat -A POSTROUTING -s 192.168.7.6 -p tcp --sport 21 -j SNAT --to 62.195.129.15
if doesnt work, remove "-p tcp --sport 21" and try again.
also do:
modprobe ip_conntrack_ftp

OpsVentus · 05-10-2004, 03:32 AM

Ok thanks I'll try that.