RE: [SLE] Ipchains forwarding a port to another
You have to use the ipportfw module with IPChains. Or, if you want to upgrade to IPTables, it's built in. I have no experience with either, but a friend has told me that he had much better luck with IPTables, than he ever did with ipportfw. -----Original Message----- From: lists@tcob1.net [mailto:lists@tcob1.net] Sent: Wednesday, February 28, 2001 1:23 PM To: suse-linux-e@suse.com Subject: [SLE] Ipchains forwarding a port to another Originally to: All Hello everybody. Does anyone know how I can tell IPchains to forward any packets destined for port x to port y . Sean ... What's a new brides' wedding night dread? Microsoft. <-> Gateway Info. This is a posting via the Fidonet Gateway at TCOB1 Any replies direct via Email will be sent to /dev/null Please reply via the list. TCOB1 http://www.tcob1.net For info pls contact sean@tcob1.net -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
I have had much better luck with the mfw module. If you are using the
SuSE firewall package and forwarding to a different port on the same
machine, it can do this. Just find the lines
FW_FORWARD_TCP="" # Beware to use this!
FW_FORWARD_UDP="" # Beware to use this!
Read the comments above it, edit the proper values in, save the file,
and as root:
rcfirewall stop
rcfirewall start
Be sure the program listening on the redirected port is listening and
away you go.
If on a different port and a different machine, e-mail me off list.
HTH,
Jeffrey
Quoting Cory Steers
You have to use the ipportfw module with IPChains. Or, if you want to upgrade to IPTables, it's built in. I have no experience with either, but a friend has told me that he had much better luck with IPTables, than he ever did with ipportfw.
From: lists@tcob1.net [mailto:lists@tcob1.net] Sent: Wednesday, February 28, 2001 1:23 PM To: suse-linux-e@suse.com Subject: [SLE] Ipchains forwarding a port to another
Originally to: All
Hello everybody.
Does anyone know how I can tell IPchains to forward any packets destined for port x to port y .
Sean
... What's a new brides' wedding night dread? Microsoft. <-> Gateway Info. This is a posting via the Fidonet Gateway at TCOB1 Any replies direct via Email will be sent to /dev/null Please reply via the list. TCOB1 http://www.tcob1.net For info pls contact sean@tcob1.net
-- I don't do Windows and I don't come to work before nine. -- Johnny Paycheck
Originally to: Jeffrey Taylor Hello Jeffrey. 01 Mar 01 09:23, you wrote to all: JT> I have had much better luck with the mfw module. If you are using JT> the SuSE firewall package and forwarding to a different port on the JT> same machine, it can do this. Just find the lines I have my own Firewall script that is excellent and I managed to do it with ipchains and the transparent_proxy in the kernel :) Sean ... What's a new brides' wedding night dread? Microsoft. <-> Gateway Info. This is a posting via the Fidonet Gateway at TCOB1 Any replies direct via Email will be sent to /dev/null Please reply via the list. TCOB1 http://www.tcob1.net For info pls contact sean@tcob1.net
On Thu, Mar 01, 2001 at 08:02:35AM -0600, Cory Steers wrote:
You have to use the ipportfw module with IPChains. Or, if you want to upgrade to IPTables, it's built in. I have no experience with either, but a friend has told me that he had much better luck with IPTables, than he ever did with ipportfw.
-----Original Message----- From: lists@tcob1.net [mailto:lists@tcob1.net] Sent: Wednesday, February 28, 2001 1:23 PM To: suse-linux-e@suse.com Subject: [SLE] Ipchains forwarding a port to another
Originally to: All
Hello everybody.
Does anyone know how I can tell IPchains to forward any packets destined for port x to port y .
Here is one way to do it /sbin/ipchains -A input -j ACCEPT -i $EXTIF -p tcp -s $UNIVERSE -d $EXTIP 80 /usr/sbin/ipmasqadm portfw -f /usr/sbin/ipmasqadm portfw -a -P tcp -L $EXTIP 80 -R $PORTFWIP 80 The above will forward requests on port 80 of EXTIP to port 80 of PORTFWIP. -- Hiren -- -------------------------------------------------------- If you haven't much education you must use your brain.
Originally to: Cory Steers * Cory Steers's head hit the keyboard and wrote: CS> You have to use the ipportfw module with IPChains. Or, if you want CS> to upgrade to IPTables, it's built in. I have no experience with either, CS> but a friend has told me that he had much better luck with IPTables, than he CS> ever did with ipportfw. Many thanks, I will have a look at both. I think that Iptables is more for the new 2.4 kernel. Sean CS> -----Original Message----- CS> From: lists@tcob1.net [mailto:lists@tcob1.net] CS> Sent: Wednesday, February 28, 2001 1:23 PM CS> To: suse-linux-e@suse.com CS> Subject: [SLE] Ipchains forwarding a port to another CS> Originally to: All CS> Hello everybody. CS> Does anyone know how I can tell IPchains to forward any packets destined CS> for port x to port y . CS> Sean CS> ... What's a new brides' wedding night dread? Microsoft. CS> <-> Gateway Info. CS> This is a posting via the Fidonet Gateway at TCOB1 CS> Any replies direct via Email will be sent to /dev/null CS> Please reply via the list. TCOB1 http://www.tcob1.net CS> For info pls contact sean@tcob1.net -- GNUPG ID 92B9D0CF | Fidonet: 2:263/950 | IRC: Efnet ICQ: 679813 | Homepage: http://www.tcob1.net | #mysticbbs Linux User: #124682 | AIM: tcobone | As TheCivvie My last power cut was 3d, 1h and 44m ago ...There are two theories to arguing with women. Neither one works. <-> Gateway Info. This is a posting via the Fidonet Gateway at TCOB1 Any replies direct via Email will be sent to /dev/null Please reply via the list. TCOB1 http://www.tcob1.net For info pls contact sean@tcob1.net
Originally to: Cory Steers Hello Cory. 01 Mar 01 08:02, you wrote to all: CS> You have to use the ipportfw module with IPChains. Or, if you CS> want to upgrade to IPTables, it's built in. I have no experience with CS> either, but a friend has told me that he had much better luck with CS> IPTables, than he ever did with ipportfw. I ended up doing it with IPchains and TRANSPARENT_PROXY :) Sean ... What's a new brides' wedding night dread? Microsoft. <-> Gateway Info. This is a posting via the Fidonet Gateway at TCOB1 Any replies direct via Email will be sent to /dev/null Please reply via the list. TCOB1 http://www.tcob1.net For info pls contact sean@tcob1.net
participants (4)
-
Cory Steers
-
Hirendra Hindocha
-
Jeffrey Taylor
-
Sean Rima