enabling port forward redirection from single external IP

nikkac · 10-03-2006, 05:25 PM

Hy Guys

I need help with enabling port forward redirection from single external IP port 80 to internal network port 4090.
this rule works for me but as i mentioned above I need to restrict access to only one external IP to be able to communicate to internal network port 4090

iptables -t nat -A PREROUTING -i ppp0 -p tcp -d X.X.X.X --dport 80 -j DNAT --to-destination 192.168.2.25:4090

Thanks in advance

Brian1 · 10-03-2006, 05:51 PM

Line like this should work.
iptables -A INPUT -s xxx.xxx.xxx.xxx -p tcp --syn --dport 80 -j ACCEPT
Then use the line you already have after this to route to the internal machine.

Brian1

nikkac · 10-04-2006, 03:24 PM

Thanks a lot for the response.

I was able to achieve this by specifying source IP inside the line:

iptables -t nat -A PREROUTING -i ppp0 -s X.X.X.X -p tcp -d X.X.X.X --dport 80 -j DNAT --to-destination 192.168.2.25:4090

Thanks again