NAT'ing an IP

Tomanas · 10-29-2005, 06:27 AM

Hi!
I want to nat the ip x.x.x.x to 192.168.0.y.
I wrote a script and put these lines:

Code:

$IPTABLES -t nat -I PREROUTING -d x.x.x.x -j DNAT --to-destination 192.168.0.y
$IPTABLES -t nat -I POSTROUTING -s 192.168.0.y -d ! 192.168.0.0/23 -j SNAT --to-source x.x.x.x
$IPTABLES -I FORWARD -d 192.168.0.y -j ACCEPT
$IPTABLES -I FORWARD -s 192.168.0.y -j ACCEPT

Then I restart iptables, but it is still not working...when i ping 192.168.0.y - I get a reply, but if i ping the x.x.x.x - destination host unreachable...
What could it be ?

mdarby · 10-30-2005, 12:47 AM

You want to forward ports from outside your network to machines inside your network, routing IPs won't work.

iptables -t nat -A PREROUTING -i $EXT_DEV -p tcp -m tcp --dport 800 -j DNAT --to-destination 192.168.1.7:800

Tomanas · 04-26-2006, 06:14 AM

now, u're wrong

anyway, i have done it a few days earlier..

Alien Bob · 04-26-2006, 09:07 AM

Tomanas is right, this can be done.

Are you missing an INPUT rule?

Code:

$IPTABLES -I INPUT -p ALL -d x.x.x.x -j ACCEPT

Eric