Simple IPTables... Want to pass all data from one external IP to an internal IP

AdamRankin · 03-28-2003, 10:31 AM

and vice versa.

We're trying to play a game using TCP/IP and I can't get my ruleset to work.

I've tried

iptables -A FORWARD -s 24.42.115.228 -o 192.168.0.1 -j ACCEPT

but I don't think that's the right setting (of course seeing as that didn't work)

If anyone has any experience (which someone must have) with this, could you suggest a good way of doing this, or perhaps describe how you did it?

Thanks for the help,

Adam

AdamRankin · 03-28-2003, 10:59 AM

Ok, perhaps a more simple question.

Would this fall under the forwarding category, or the nat PREROUTING category.

I'm not sure how it all works, but I think I want to forward ALL packets sent from his IP to my IP.

Argh!

Blindsight · 03-28-2003, 01:46 PM

try -j MASQ or -j MASQUERADE, don't remember which.

search google for iptables HOWTO, read that. It'll tell you exactly how to do it. I haven't messed with iptables in quite a while.

peter_robb · 04-01-2003, 03:24 AM

It needs to be a PREROUTING rule if the server is in your network

eg
iptable -t nat -A PREROUTING -p tcp --dport xxx -j DNAT --to-destination 192.168.0.1

Gaming servers can also use secondary connections/ports, so you also need
iptables -A FORWARD -m state --state RELATED -j ACCEPT
This requires some special ip_conntrack modules designed to track that particular connection type, eg irc, quake, ...

Usually, if you search Google for the game name, you will find help on firewall configs, port numbers etc.