Dotaz: Nefungujici port forward - vyprsi na time out

[lowprize]

Ahoj po dvou dnesh jsem uz z toho nemocnej. Mam vypli vsechny firewally, hosts.allow je ALL:ALL. Script pro iptables je nasledujici.

#!/bin/sh
#Vyresetovani vseho

iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X

iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -t nat -A PREROUTING -p tcp -d 222.555.333.444 --dport 222 -j DNAT --to-destination 10.0.0.3:222
iptables -A FORWARD -d 10.0.0.3 -p tcp -m tcp --dport 222 -j ACCEPT
iptables -nvL

Vypis pro nat

 iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
DNAT       tcp  --  anywhere             222.555.333.444 tcp dpt:222 to:10.0.0.3:222

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
MASQUERADE  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Vypis pro iptables -L

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             10.0.0.3            tcp dpt:222

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Forwardovani je zaple, cat /proc/sys/net/ipv4/ip_forward ....1

Stejne to vzdy vyprsi na timeout, jedna se o Archlinux a generic jadrem. ma nekdo napad kde pakety pro port 222 skonci ?

---

---

Odpovědi

[lowprize]

Admini prosim smazat, sem totiz debil debil debil.

na cilove sanici je nastgavena jina GW

[H0ax]

tak to SNATni

[lowprize]

to nebude potreba, chtel sem to jen otestovat pred nahrazenim starym routerem a dva dny sem to zkousel nez me kamarad kopl za to do prdele :D