Advertisement

08.29.2007 at 08:00AM PDT, ID: 22794526
[x]
Attachment Details

iptables routing troubles

Asked by Vision in IP Tables/IP Chains, Linux Networking

Tags: iptables, routing

I'm having a heck of a time getting my Linux routing to work.  Because I was hacked a while back I decided to build in two levels of firewall in order to try to protect my systems.  My network looks like this:
Internet -> [DLINK] Router -> [LinuxBox] -> Home Network

I've set up my [DLINK] router to open up the ports for FTP and SSH to my [LinuxBox] and its working great, but when I try to open up a port on the [DLINK] and then open up the ports on the [LinuxBox] to go to one of my windows boxes on the other side it doesn't seem to be working.

So here's some more specifics:
Outer Network:
[DLINK] Router (192.168.0.1)
[LinuxBox] (192.168.0.xx) (ETH1)
Inner Network:
[LinuxBoxInner] 10.10.10.1 (ETH0)
[WebServer] 10.10.10.xx  (On port 8089)

It has been tested and works that any other windows box on 10.10.10.xxx network can connect to [WebServer]:8089 and works.

Under my impression of how it all works, this is what I thought should do it:
/sbin/iptables -t nat -A PREROUTING  -i eth1 -p tcp --dport 8089 -j DNAT  --to [WebServer]:8089

It does not seem to be working.
I'll add my IPTABLES outputs in a message right after this (for readability).
I also understand that the 'Accept' on all the chains are likely not a good security measure, but I'm bypassing that for now.

Thanks for the help.
(Other info: Red Hat FC3)Start Free Trial
[+][-]08.29.2007 at 08:00AM PDT, ID: 19791947

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]08.30.2007 at 12:59AM PDT, ID: 19798166

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: IP Tables/IP Chains, Linux Networking
Tags: iptables, routing
Sign Up Now!
Solution Provided By: Blaz
Participating Experts: 1
Solution Grade: A
 
 
[+][-]08.30.2007 at 01:00PM PDT, ID: 19803642

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_1_20070628