On Thu, 2002-09-05 at 19:54, Kevin - KD Micro Software wrote:
> 
> I don't understand why none of the iptables forwarding commands are working.
> Before the command is issued, when a remote user attempts to connect to that
> port, you get the Connection Refused message (as you would expect). After
> you issue the commands and then make a connection it just sits there and
> times out.

You can't use the iptables rules you were given to forward packets from
one machine on a LAN, through the server, to a second machine on the
same LAN (assuming the same IP subnet).

The client will try to open the connection to your router
(1.1.1.1:8181).  The router will forward the packet according to its
rules by changing the destination and forwarding it on as normal.  The
server (1.1.1.2) gets the packet, but it has the original source address
on it... that's the trick.  The server (1.1.1.2) replies to the client
according to its normal routing rules.  If the two are in the same
subnet, it goes directly to the client, not through the router, and the
client has no idea what to do with those packets (client was talking to
1.1.1.1, but gets replies from 1.1.1.2, and thows them away as invalid).

In that sort of setup, userspace forwards are ideal.




-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to