opening a port

satish · 11-22-2006, 07:13 AM

i have redhat linux 9 server with 2 nic

eth0 - 192.168.1.2 local
eth1- 59.144.124.57 internet

we have a application server in our local lan that ip is
192.168.1.249 which works on 8500 port.i want to expose this machine on internet for users which are not in office. please give any suggestions regarding iptables.

thanks in advance

fordeck · 11-22-2006, 07:49 AM

Try this:

Code:

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 8500 -j DNAT --to-destination 192.168.1.249:8500

amitsharma_26 · 11-23-2006, 02:14 PM

& to continue fordeck's post,

either set your lan client(192.168.1.249)'s gateway as 192.168.1.2
OR
run another POSTROUTING rule at firewall.

Code:

iptables -t nat -A POSTROUTING -p tcp --dport 8500 -d 192.168.1.249 -j SNAT --to 192.168.1.2

And if in case you are already running any firewall script, you got to allow this traffic from FORWARD (--dport 8500) chain as well.