samba - Mar 2003 - Port Forward UDP 1911

Dear all, =0D
 =0D
3 Computers are linked together with cross over cable and computer B is the=0D
router. =0D
 =0D
Computer A - Starlight Video Server(Solaris) =0D
- 192.168.0.11 =0D
 =0D
Computer B - Iptables(Linux) =0D
- eth0 - 192.168.0.12 =0D
- eth1 - 158.192.92.102 =0D
 =0D
Computer C - Video receiver(Windows) =0D
- 158.192.92.105 =0D
 =0D
First =0D
# echo "1" > /proc/sys/net/ipv4/ip_forward =0D
 =0D
it works fine, video receiver can receive the video from 192.168.0.11. =0D
The purpose for using iptables is that Internet use can get access our video=0D
server, also our video server can be protected by iptables. =0D
 =0D
Second =0D
modprobe iptables =0D
for TABLE in filter nat mangle; do =0D
iptables -t $TABLE -F =0D
iptables -t $TABLE -X =0D
done; =0D
iptables -t nat -A PREROUTING -p udp --dport 1911 -i eth1 -j \ =0D
DAT --to 192.168.0.11: 1911 =0D
iptables -A FORWARD -p udp --dport 1911 -d 192.168.0.11 --j ACCEPT =0D
 =0D
Video receiver can receive the video, but when we investigate the packets go=0D
into video receiver. =0D
Source IP: 192.168.0.11:1911 =0D
Destination IP: 158.192.92.105: 1069 =0D
Protocol: UDP =0D
Packet Len: 1.46KB =0D
Data Len: 1.42KB =0D
 =0D
Third, we execute one more line in order to change the source IP =0D
# iptables -nat -A POSTROUTING -o eth1 -j \ =0D
SNAT --to 158.192.92.102 =0D
 =0D
But the result doesn't change, we still get packet with source IP.
192.168.0=0D
11. =0D
 =0D
I'd be grateful for any helps or advices. =0D
 =0D
Paul Yip =0D
 =0D
 =0D
 =0D
 =0D
=20

Paul,
	This, of course is not the list for such questions. This list deals
with samba only. My suggestion to you: get and install shorewall, which
is an excellent configuration front-end for IPTables, 
(www.shorewall.net) then read the configuration documentation there,
then if you need further assistance, Google for shorewall-users, and
either join that list, or search the archives.

Good luck
Christopher


On Tue, 2003-03-11 at 03:43, Paul Yip wrote:
>  Dear all, 
>  
> 3 Computers are linked together with cross over cable and computer B is the
> router. 
>  
> Computer A - Starlight Video Server(Solaris) 
> - 192.168.0.11 
>  
> Computer B - Iptables(Linux) 
> - eth0 - 192.168.0.12 
> - eth1 - 158.192.92.102 
>  
> Computer C - Video receiver(Windows) 
> - 158.192.92.105 
>  
> First 
> # echo "1" > /proc/sys/net/ipv4/ip_forward 
>  
> it works fine, video receiver can receive the video from 192.168.0.11. 
> The purpose for using iptables is that Internet use can get access our
video
> server, also our video server can be protected by iptables. 
>  
> Second 
> modprobe iptables 
> for TABLE in filter nat mangle; do 
> iptables -t $TABLE -F 
> iptables -t $TABLE -X 
> done; 
> iptables -t nat -A PREROUTING -p udp --dport 1911 -i eth1 -j \ 
> DAT --to 192.168.0.11: 1911 
> iptables -A FORWARD -p udp --dport 1911 -d 192.168.0.11 --j ACCEPT 
>  
> Video receiver can receive the video, but when we investigate the packets
go
> into video receiver. 
> Source IP: 192.168.0.11:1911 
> Destination IP: 158.192.92.105: 1069 
> Protocol: UDP 
> Packet Len: 1.46KB 
> Data Len: 1.42KB 
>  
> Third, we execute one more line in order to change the source IP 
> # iptables -nat -A POSTROUTING -o eth1 -j \ 
> SNAT --to 158.192.92.102 
>  
> But the result doesn't change, we still get packet with source IP.
192.168.0
> 11. 
>  
> I'd be grateful for any helps or advices. 
>  
> Paul Yip 
>  
>  
>  
>  
>  
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba