[Flug] SSH con DNAT

[Paolo Larcheri]

2010/12/19 Tommaso Visconti <tommaso.visconti@gmail.com>:
> echo 1 > /proc/sys/net/ipv4/ip_forward
> iptables -A FORWARD -p tcp -i $EXTERNAL_INTERFACE --dport 2222 -j ACCEPT
> iptables -t nat -A PREROUTING -p tcp -i $EXTERNAL_INTERFACE -d $PUBLIC_IP
> --dport 2222 -j DNAT --to $SERVER_X:22

Cambia
 iptables -A FORWARD -p tcp -i $EXTERNAL_INTERFACE --dport 2222 -j ACCEPT
in
 iptables -A FORWARD -p tcp -i $EXTERNAL_INTERFACE --dport 22 -j ACCEPT

La regola in PREROUTING modifica il pacchetto prima che questo passi
alla FORWARD.

Ciao,
Paolo


-- 
Paolo Larcheri
Linux User   #383461
http://counter.li.org