[Gllug] iptables DNAT problem

[Adrian McMenamin]

OK, so now I have bittorrent working, but only after I mangled my
firewall.

I used to have this in it...

-A PREROUTING -p tcp -i eth0 --dport 80 -j DNAT --to 192.168.12.35

Which allowed external connections to pass through to the FORWARD chain
where they were subject to further filtering and if passed they'd
connect to a box (192.168.12.35) running apache.

eth0 is the external if, but it has a dynamically set IP address

Once I installed the bittorrent client on a box inside the network I
added this line...

-A PREROUTING -p tcp -i eth0 --dport 6881 -j DNAT --to 192.168.13.22

(192.168.13.xx is a wireless network)

But I can only use one or the other. Currently I have the web line
commented out, so no reachable webserver.

Why can't I (seemingly) have two different DNAT targets?

the


-- 
Adrian McMenamin <adrian at mcmen.demon.co.uk>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: This is a digitally signed message part
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20050123/0a1dee2d/attachment.pgp>
-------------- next part --------------
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug