[Shorewall-users] IP Forwarding

Tom Eastep
Wed, 13 Nov 2002 14:27:20 -0000

--On Wednesday, November 13, 2002 01:54:00 PM +0200 SHOREWALL TimeLord
<shorewall@timelord.sk> wrote:

> Nigel George  (13.11.2002  12:24):
>> Hi,
>> I''m trying to get RAdmin [uses tcp 4889] access to my Windows
machine
>> which is behind my firewall.
>>
>> I have zones:
>>
>> gbl : the world
>> loc : my lan
>> fw : firewall
>>
>> I placed the following in my rules file
>>
>> DNAT  gbl    loc:192.168.0.2      tcp    4889   -
>>
>> When trying to RAdmin I get a cannot conect to server error.
>>
>> 192.168.0.2 is my Windows Machines IP address.
>>
>> Can anyone help me?
>
>
>
> DNAT   gbl     loc:192.168.0.2       tcp     4889      -
> 123.123. 123.123
>
> where 123.123.123.123 is external IP of your firewall
>

If DETECT_DNAT_IPADDRS=Yes in shorewall.conf, then this rule is equivalent
to the original poster''s rule.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://shorewall.sf.net
ICQ: #60745924  \ teastep@shorewall.net