Shorewall users - Feb 2003 - DNAT didn''t do...

...what I expect. ;-)

The situation: I run a internal namebased webserver with a privat ip
172.17.1.1 on port 8060. All privat internal clients can access the
server, and I now want the server to be reacheable from the internet.

So I added a rule:

DNAT net loc:172.17.1.1 tcp 8060 - 193.196.129.2

to the rule-file, but that didn''t works :-( I looked in the FAQ and
doc,
but didn''t find anything that helped.

Any hints?

Thanks in advance!

cu...
...G?tz Reinicke

--On Wednesday, February 05, 2003 4:44 PM +0100 G?tz Reinicke 
<goetz.reinicke@filmakademie.de> wrote:
> ...what I expect. ;-)
>
> The situation: I run a internal namebased webserver with a privat ip
> 172.17.1.1 on port 8060. All privat internal clients can access the
> server, and I now want the server to be reacheable from the internet.
>
> So I added a rule:
>
> DNAT net loc:172.17.1.1 tcp 8060 - 193.196.129.2
>
> to the rule-file, but that didn''t works :-( I looked in the FAQ
and doc,
> but didn''t find anything that helped.
>
> Any hints?
>
Please tell us the results of the diagnostic tests described in FAQ 1b.

-Tom
--
Tom Eastep   \ Shorewall - iptables made easy
Shoreline,    \ http://www.shorewall.net
Washington USA \ teastep@shorewall.net