Hi people...
Few weeks ago I ask this same question, but so far I can't find the answer.
I have the following iptables rules in a Redhat box:
modprobe iptable_filter
modprobe iptable_nat
modprobe ipt_MASQUERADE
modprobe ipt_state
iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to <public_ip>
iptables -A INPUT -i eth1 -p tcp --dport 8028 -m state --state NEW -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 8028 -m state --state NEW -j ACCEPT
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 8028 -j DNAT --to <internal_ip>:8028
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
iptables -A FORWARD -i eth0 -j ACCEPT
I'm filtering all incoming packages through the 8028 port to an internal machine,
that works ok, no problem with this...
Also I'm trying to give internet access to several clients through maquerading,
all my windows machines have www,msn,irc,ftp etc... access but my linux client don't.
Is there some problem with my rules?...
when I do a cat /proc/net/ip_conntrack I receive the following about the linux clients:
udp 17 28 src=10.0.1.70 dst=10.0.255.255 sport=138 dport=138 [UNREPLIED] src=10.0.255.255 dst=10.0.1.70 sport=138 dport=138 use=1
or something similar...
any help would be appreciated..
regards,
