Re: Problem with DNAT

Tom Eastep
Mon, 19 Jun 2006 14:44:43 -0000

Stefan Onken wrote:

>
>
> the ppp0 device is my external device (UMTS Card), while eth0 is connected
> to a webcam. The ip of the webcam is 192.168.20.27. I can access the
> webcam from the local machine itself.
>
> umts1 ~ # shorewall show nat
> Chain net_dnat (1 references)
>  pkts bytes target     prot opt in     out     source
> destination
>     7   420 DNAT       tcp  --  *      *       0.0.0.0/0
> 0.0.0.0/0           tcp dpt:80 to:192.168.20.27
>

Sorry -- I missed that information the first time.

>
> The firewall seems NOT to block the incoming packages, at least it does
> not shown in the log. Any ideas ?

What about the default gateway setting on the webcam (192.168.20.27)? It should
be set to 192.168.20.99.

If you can''t set the default gateway, you''ll have to
masquerade traffic from the
net to the web camera with this entry in /etc/shorewall/masq:

eth0:192.168.20.27	0.0.0.0/0	192.168.20.99	tcp	80

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key