how can i let external ip to access to an oracle port in a pc on my lan , i use iptables and NATing ihave public ip and privates for my lan

help me please

please any one can ?
this is urgent for me cause i want someone external to connect to oracle on my lan where i use two network card one for ext and other for internal and using NAT between them and want the one to access orcal port on PC 192.168.1.12 which is internal ,, how to do that ???

Hi,

The process, with iptables, is called port forwarding. Be very careful with this as the port becomes freely available from the internet to anyone who scans your network. Make sure your application / service on the inside is well patched and protected.

It should look something like this:

iptables -t nat -A PREROUTING -i <your incoming net interface (eth0?)> -p tcp -m tcp --dport <your oracle port> -j DNAT --to-destination 192.168.1.12:<your oracle port>
iptables -A INPUT -i eth1 -p tcp -m tcp --dport <your oracle port> -j ACCEPT

Cheers,

this command will allow eevryone to get access on my lan but i want a specific address ip to have the access

or if you can give me a better solution will be appreciated :

i have eth0 : internet 172.x.x.x
eth1 : LAN 10.x.x.x

and i want one in the exterieur to get acces on telnet and oracle port at the address 10.10.5.3

I'm confused...The command I gave you gives access to anyone from the outside to your internal address on your oracle port and telnet assuming the machine you run these commands is the machine facing the internet:

iptables -t nat -A PREROUTING -i <your incoming net interface (eth0?)> -p tcp -m tcp --dport <your oracle port,23> -j DNAT --to-destination 10.10.5.3:<your oracle port,23>
iptables -A INPUT -i eth1 -p tcp -m tcp --dport <your oracle port,23> -j ACCEPT

No one on your LAN gets access through this process...

i want only one address that has the access not EVERYONE only one address for example i want the one who has address 215.256.12.136 can access on port http for my lan(192.168.1.1) through ethenet 1 (172.151.73.112)

i did this but it didnt work ????????????
please help me i've to do this connection

Also, check /var/log/syslog. If iptables is blocking anything it will show up there.

i did nt find that file , is there anything should install or active or something ??
thanky ou

iptables -t nat -A PREROUTING -i <your incoming net interface (eth0?)> -p tcp -m tcp --dport <your oracle port> -j DNAT --to-destination 192.168.1.12:<your oracle port>
iptables -A INPUT -s <ip adress you want to let in> -i eth0 -p tcp -m tcp --dport <your oracle port> -j ACCEPT

The part you want to add would be the '-s'.

thank you,
i'll give you details information (this is so so urgent for me am working)

i have two network cards one for external other for internal(192.168.1.208:6668/forms/frmservlet) which i want to access and telnet it from exteranl when i type http://myaddress.

http://myaddress this ROUT me to 192.168.1.208:6668/forms/frmservlet

and when telnet my address ROUTE me to 192.168.1.208

i hope it is clear

help will be so appreciated
thanks

iptables -t nat -A PREROUTING -i <your incoming net interface (eth0?)> -p tcp -m tcp --dport <your oracle port> -j DNAT --to-destination 192.168.1.12:<your oracle port>
this command i did it but it didnt work !!!

any one ???

Can you please post the outcome of the command when you run it in a shell ?

thank you all, the problem solved if anyone want to see how just post me a question, i dont have access now to the server , i'll put the commands later...
thank you all