LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 06-07-2007, 11:36 AM   #1
access_denied79
LQ Newbie
 
Registered: Apr 2006
Posts: 1

Rep: Reputation: 0
iptables firewall forwarding L2TP traffic to windows 2003 server


Ok I have a win2k3 server setup with routing and remote access accepting L2TP connections and it works fine if you connect internally. If I have to go through my IPTABLES firewall running on debian 4 the connection never happens. PPTP works fine forwarding to my server but L2TP does not. I know it is a problem with the firewall not forwarding everything to the server, but I have been working days on this and I am about to give up so I am asking for help with this. My current firewall config to forward this packets are as follows:

#IPSec
$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p udp --dport 500 -m state \
--state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A PREROUTING -t nat -p udp -d $EXTIP --dport 500 -j DNAT --to $server

$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p udp --dport 4500 -m state \
--state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A PREROUTING -t nat -p udp -d $EXTIP --dport 4500 -j DNAT --to $server

$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p udp --dport 1701 -m state \
--state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A PREROUTING -t nat -p udp -d $EXTIP --dport 1701 -j DNAT --to $server

$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p 50 -m state \
--state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A PREROUTING -t nat -p 50 -d $EXTIP -j DNAT --to $server

$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p 51 -m state \
--state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A PREROUTING -t nat -p 51 -d $EXTIP -j DNAT --to $server

What is wrong with this? Why will it not work external to internal, I know it works fine internal to internal.
 
Old 06-07-2007, 09:52 PM   #2
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Moved: This thread is more suitable in Linux - Networking and has been moved accordingly to help your thread/question get the exposure it deserves.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
port 25 forwarding iptables FC4, can't get it to pass traffic sahib2u Linux - Security 4 03-01-2006 10:00 AM
Fedora Core in Intel P4 firewall guarding Windows 2003 server gugabaga Fedora 5 01-24-2006 02:14 AM
Opening a L2TP/PPTP tunnel from debian to win 2003 hq4ever Linux - Networking 2 01-23-2006 05:13 PM
Red Hat Linux 9 + Windows Server 2003 + Windows XP + Fedora in same domain wolfy339 Linux - Networking 5 03-02-2005 06:03 AM
Trying to forward web traffic through firewall w/ IPTABLES ShinySteelRobot Linux - Networking 6 08-17-2003 05:43 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 09:04 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration