ipmasq and apache

intuxicator · 04-08-2005, 08:01 AM

i have an ipmasq script which works pretty fine but what bugs me is that, that it rejects packages from samba, ssh and apache port. So my questions is how can i enable those ports ? Btw.this is my rc.ipmasq script

Quote:

#!/bin/sh

IPTABLES=/sbin/iptables

#All The lines below are NAT routing

# flush any old rules
$IPTABLES -F
$IPTABLES -F -t nat
$IPTABLES -t mangle -F

# turn on NAT (IP masquerading for outgoing packets)
$IPTABLES -A POSTROUTING -t nat -o ppp0 -j MASQUERADE

# enable IP forwarding (of incoming packets)
echo 1 > /proc/sys/net/ipv4/ip_forward

$IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT
$IPTABLES -P INPUT DROP #only if the first two are succesful
$IPTABLES -A FORWARD -i ppp0 -o ppp0 -j REJECT

big thanx in advance!

comprookie2000 · 04-09-2005, 07:51 PM

Here is a sample;
Forward port 2 to ssh on an internal host
# iptables -t nat -A PREROUTING -p tcp --dport 2 -i eth1 -j DNAT --to 192.168.0.2:22

FTP forwarding to an internal host
# iptables -t nat -A PREROUTING -p tcp --dport 21 -i eth1 -j DNAT --to 192.168.0.56

HTTP forwarding to an internal host
# iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth1 -j DNAT --to 192.168.0.56

That said I go the easy way and use firestarter.