Shorewall users - Oct 2002 - Xbox Connection

Hi all wondered if you could help me with this little problem I have.

I''m wanting to connect my Xbox to the net for gaming and have the
following set-up

3 interfaces on my Linux box

eth0 :net (connected to my cable modem)
eth1 :me (IP range 192.168.3.0)
eth2 :loc (IP range 192.168.0.0)

My Xbox is connected through a hub to eth2

I need to forward TCP and UDP packets to my PC which is 192.168.3.1, so I added
the rule: -
DNAT      net    me:192.168.3.1    udp    8602
DNAT      net    me:192.168.3.1    tcp    8602
DNAT      loc    me:192.168.3.1    udp    8602
DNAT      loc    me:192.168.3.1    tcp    8602

Also I have in the policy I have: -
me    all    accept
all    me    continue

I can see all the Xbox servers on the net but when I check my Xbox connection
its not found.
Does anybody know how to forward the packets that are coming from my Xbox on
eth2 to me on eth1

Hope there is enough info there

Regards

Chet

------------------------------------------------
www.chetnet.co.uk/portal
Cable Modem Portal
-------------------------------------------------




---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.401 / Virus Database: 226 - Release Date: 09/10/2002

Chet wrote:
> Hi all wondered if you could help me with this little problem I have.
>  
> I''m wanting to connect my Xbox to the net for gaming and have the 
> following set-up
>  
> 3 interfaces on my Linux box
>  
> eth0 :net (connected to my cable modem)
> eth1 :me (IP range 192.168.3.0)
> eth2 :loc (IP range 192.168.0.0)
>  
> My Xbox is connected through a hub to eth2
>  
> I need to forward TCP and UDP packets to my PC which is 192.168.3.1, so 
> I added the rule: -
> DNAT      net    me:192.168.3.1    udp    8602
> DNAT      net    me:192.168.3.1    tcp    8602
> DNAT      loc    me:192.168.3.1    udp    8602
> DNAT      loc    me:192.168.3.1    tcp    8602
>  
> Also I have in the policy I have: -
> me    all    accept
> all    me    continue
>  
> I can see all the Xbox servers on the net but when I check my Xbox 
> connection its not found.
> Does anybody know how to forward the packets that are coming from my 
> Xbox on eth2 to me on eth1
Try using ACCEPT rather than DNAT for the loc->me rules.

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net