Home / server / Questions / 320487
In Process
jeffcook2150
Asked: 2011-10-12 06:35:35 +0800 CST

iptables rule to return some packets to arbitrary box on network

  • 772

I need a rule that will allow me to send back all traffic on port 1723 to an arbitrary, non-gateway box on the private network with all packet information intact.

The machine I need to target is acting as a gateway just for this port though it is not configured as a standard interface gateway. Things are set up this way to avoid putting in a work request to get the phone company to charge its router, sitting on client side. I need the box with the open port just to sit in the middle and forward traffic between the server and client.

The middleman is a Windows machine, but I believe it is configured correctly. Watching Wireshark, my Linux machine never sends it back the data though ip_forward is 1 and I have a DNAT rewrite rule in nat PREROUTING. :(

iptables

1 Answers

  1. I use this (output is from iptables-save) to redirect:

    *nat
...
-A PREROUTING -p tcp -m tcp --dport 5000 -j DNAT --to-destination 192.168.7.21
-A PREROUTING -p udp -m udp --dport 5000 -j DNAT --to-destination 192.168.7.21

    HTH

    • 1