[Shorewall-users] IP Forwarding

Tom Eastep
Wed, 13 Nov 2002 22:27:20 -0000

--On Wednesday, November 13, 2002 12:32 PM +0100 "Reginald R.
Richardson"
<whiz.kid@tyarosh.homeip.net> wrote:

> Try adding this also
>
> ACCEPT	gbl	loc		tcp	4889	-
>

Besides creating an entry in the NetFiler nat table, the rule

DNAT	gbl	loc:www.xxx.yyy.zzz	tcp	4889	-

also generates the filter table rule:

ACCEPT	gbl	loc:www.xxx.yyy/.zzz	tcp	4889	-

You do not need to add the separate ACCEPT rule yourself.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://shorewall.sf.net
ICQ: #60745924  \ teastep@shorewall.net