Hi,
 
I don't seem to be able to get external incoming traffic destined for port 80 through my firewall.
 
I have an NT box with apache running on port 80 behind the firewall. I don't have httpd running on the firewall machine itself. Internal machines are able to connect through port 80,but external machines can't.
 
The rules I am using are as follows:

$IPTABLES -A PREROUTING -t nat -p tcp --dport 80 -j DNAT --to 192.x.x.x  ( internal ip of nt box)

$IPTABLES -A INPUT -p tcp --dport 80 -j ACCEPT

$IPTABLES -t nat -A POSTROUTING -j SNAT --to $EXTIP ( external ip addr of firewall machine)

I have also tried putting in -s 0/0 , but it still doesn't work.

I did get it to work when I had apache listening on port 9000, but I don't want external & internal users to have to put the port number in.

 

regards

Lisa

 

 
This E-mail and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this E-mail in error please notify us immediately 
and delete this E-mail from your system. Thank you.
It is possible for data transmitted by email to be deliberately or
accidentally corrupted or intercepted. For this reason, where the
communication is by E-mail, the Big Picture Group does not accept 
any responsibility for any breach of confidence which may arise through the use of 
this medium.
Opinions, conclusions and other information in this message that do not relate to the 
official business of Big Picture Group shall be understood as neither given nor 
endorsed by it.
This footnote also confirms that this email message has been swept for the presence of 
known computer viruses.


Reply via email to