Quote:
Originally Posted by Stressik
iptables -I FORWARD -p tcp --dport 723 -i eth1 -o eth1 -j ACCEPT
iptables -t nat -I OUTPUT -p tcp --dport 81 -d <ip_zew> -j DNAT --to-destination 192.168.25.3:80
iptables -t nat -I OUTPUT -p tcp --dport 723 -d <ip_zew> -j DNAT --to-destination 192.168.25.3:723
|
Also, I think your putty connection refused has to do with the port 723 not being forwarded to the mentioned host, assuming that the putty client on win7 is connected to eth0, not eth1. the above iptables line should be duplicated and adapted to forward traffic from eth0 to eth1, port 723. like this
Code:
iptables -I FORWARD -p tcp --dport 723 -i eth0 -o eth1 -j ACCEPT
Looking deeper into your lines.. I think the following is not right:
Code:
iptables -t nat -I OUTPUT -p tcp --dport 81 -d <ip_zew> -j DNAT --to-destination 192.168.25.3:80
iptables -t nat -I OUTPUT -p tcp --dport 723 -d <ip_zew> -j DNAT --to-destination 192.168.25.3:723
OUTPUT chains don't normally have DNAT entries, but SNAT instead. You should try putting these lines in the PREROUTING chain (you change the destination, so the routing decision will have to decide on the altered destination, hence the PREROUTING table.
