Hi,
there is this sserver I might have to take care of in the next days, I´ve checked it briefly and could not find where port forwardring rules are being defined? (they are not in iptables´ conf. for instance)

I dont believe Squid has such forwarding-incoming-connections functionality, does it?

The remote assistance connections are coming through the VPN... may that be reason they don´t need their ports being redirected ?

This is a Fedora 5 server acting as a router, running iptables, squid and SElinux, with an ASDL connection.
It does not have any X server or apps, so I basically checked the conf files I am aware of.

Thanks in advance.

well it ould depend on what you are really referring to, but this would generally be nothing at all to do with squid. it would have to be iptables, but there are many places you could put iptables config if you wanted to. if you do an "iptables -L" are they shown there?

It can be done using the iptables. You can type it in command prompt and give /etc/init.d/iptables save to make the settings permanent.

The below example will redirect the request from 80(httpd) to the 8080(tomcat) internel. To the outer world it will look as if it was running from 80.

iptables -t nat -A OUTPUT -d localhost -p tcp --dport 80 -j REDIRECT --to-ports 8080
iptables -t nat -A OUTPUT -d your hostname -p tcp --dport 80 -j REDIRECT --to-ports 8080
iptables -t nat -A PREROUTING -d your hostname -p tcp --dport 80 -j REDIRECT --to-ports 8080

Hi, thanks for your input.

yeah, I know the usual way to do this kind of thing, but in this case I was wondering if it could have been set-up in some other way.

That -L option seems to be what I need to see if there are other rules I didn´t find.

BTW, let me ask you again if a remote site connected through some VPN *could* initiate connections to listenning services in the LAN´s PCs without ports being explicitely redirected from the router to the PCs.

Regards.