[Shorewall-users] dnat rules problem

Tom Eastep
Fri, 30 May 2003 08:50:16 -0000

On Fri, 30 May 2003 10:47:36 -0400, Rodrigo Cortes Cano <raprop@koslan.cl>
wrote:

> Hi!
>
> DNAT, this is rulez files
>
> DNAT    lan:1.1.1.235   wan:x.x.x.x     tcp     pop3    -
> DNAT    lan             wan:y.y.y.y     tcp     pop3    -
>
>

I don''t know exactly what you are trying to accomplish here but you
seem to
want to produce these rules:

iptables -A lan_dnat -s 1.1.1.235 -d x.x.x.x -p tcp -m tcp --dport 110 -j
DNAT --to-
destination 164.77.62.6
iptables -A lan_dnat -s 1.1.1.0/255.255.255.0 -p tcp -m tcp --dport 110 -j
DNAT --to-
destination y.y.y.y

To do that:

DNAT	lan:1.1.1.235	wan:164.77.62.6	tcp	110	-	x.x.x.x
DNAT	lan:1.1.1.0/24	wan:y.y.y.y