Hi

I’m using iptables to create a firewall for a VPN.

Ex.

196.41.21.100 tries to connect to my server from an external ip to my 196.22.176.76 external ip.

How do I route them to my internal ips in the intranet.

I’ve tried DNAT but it can only route if it knows the ip, and obviously external users wont be able to see my internal ips.

The problem is, if I get a connection from an external source that connect to my external ip I need to route the connection to a mail server or a browsing server...

Ex mailing server->192.168.1.85

Please tell me if there is a straightforward command...

Any help would be much appreciated.

No, but you know where to route what. smtp connections: [ext_ip]:25 are routed to your mail server 192.168.1.85, http connections are routed to your web server, etc....

It's called portforwarding, btw.