In this case another device isn't really an option. 

I tried this:
# iptables -t nat -A PREROUTING -p udp -d 10.96.5.5 --dport 162 -j DNAT
--to 192.168.1.18:162
# iptables -A FORWARD -p udp -d 192.168.1.18 --dport 162 -j ACCEPT


# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             192.168.1.18       udp
dpt:snmptrap

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
#

It's not forwarding anything though.  Before anyone asks, the networks
10.96.5.x and 192.168.1.x are reachable. I have Ethreal running
capturing 162 on both systems. 10.96.5.5 is receiving tons of 162's,
192.168.1.18 is not receiving any. Tells me the forward isn't working. 

Any suggestions?

Thanks,
James

On Wed, 2003-09-03 at 11:36, Joe Polk wrote:
> Probably so. Or buy a cheap NAT Router and do it...but then you have NAT 
> interference being in a simple LAN and may have to define static routes, but 
> the interface is simple enough (Web).
> 
> <<JAV>>
> 
> ---------- Original Message -----------
> From: James Pifer <[EMAIL PROTECTED]>
> To: RedHat List <[EMAIL PROTECTED]>
> Sent: 03 Sep 2003 10:28:01 -0400
> Subject: Re: Port Forward 1 Port
> 
> > Very cool program, but I need to forward UDP port 162 (SNMP traps).
> > Sorry, I should have been more specific. 
> > 
> > Any other suggestions? Am I back to iptables? Can anyone assist with 
> > a simple forwarding rule without going nuts with iptables?
> > 
> > Thanks,
> > James
> > 
> > On Wed, 2003-09-03 at 09:56, Joe Polk wrote:
> > > Try http://www.boutell.com/rinetd/
> > > 
> > > <<JAV>>
> > > 
> > > ---------- Original Message -----------
> > > From: James Pifer <[EMAIL PROTECTED]>
> > > To: RedHat List <[EMAIL PROTECTED]>
> > > Sent: 03 Sep 2003 09:35:36 -0400
> > > Subject: Port Forward 1 Port
> > > 
> > > > I have been googling because I know this has been talked about a lot,
> > > > but what I've found is overkill for what I need (I think).
> > > > 
> > > > I have a RH8 machine on a private net that has iptables but 
> > > > everything is set to ACCEPT. I need to forward port 162 to another 
> > > > machine. Is there an easy way to do this with iptables without 
> > > > having a full fledged firewall running with a bunch of rules?
> > > > 
> > > > Maybe there's a better way of doing? I'm open to suggestions. 
> > > > 
> > > > Thanks,
> > > > James
> > > > 
> > > > -- 
> > > > redhat-list mailing list
> > > > unsubscribe mailto:[EMAIL PROTECTED]
> > > > https://www.redhat.com/mailman/listinfo/redhat-list
> > > ------- End of Original Message -------
> > > 
> > 
> > -- 
> > redhat-list mailing list
> > unsubscribe mailto:[EMAIL PROTECTED]
> > https://www.redhat.com/mailman/listinfo/redhat-list
> ------- End of Original Message -------
> 


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to