Shorewall users - May 2006 - Simple Port Forwarding Question

I know how to forward a port from the net interface to the same port on an
internal machine:

DNAT     net     loc:192.168.0.100    tcp   50001:50009

But what is the proper variation on this to forward an incoming port to a
different port on the internal machine?

For example, if I connect to port 999 on my net interface, I want it
forwarded to port 80 on 192.168.0.3.

Thanks!

...Jake

-- 
Jake Colman
Sr. Applications Developer
Principia Partners LLC
Harborside Financial Center
1001 Plaza Two
Jersey City, NJ 07311
(201) 209-2467
www.principiapartners.com



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

Jake Colman wrote:
> I know how to forward a port from the net interface to the same port on an
> internal machine:
> 
> DNAT     net     loc:192.168.0.100    tcp   50001:50009
> 
> But what is the proper variation on this to forward an incoming port to a
> different port on the internal machine?
> 
> For example, if I connect to port 999 on my net interface, I want it
> forwarded to port 80 on 192.168.0.3.
This is Shorewall FAQ #1C.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key