PDA

Просмотр полной версии : Проблема с Iptables


.W
17.12.2007, 22:39
Собстно сабж
iptables -t nat -A POSTROUTING -p tcp --dport 8888 -j DNAT --to-destination 1.1.1.1 --to-ports 80

Почему оно не работает? Подскажите...
Зы: срочно, ответ нужен в течении полутора часов..
Заранее спасибо...

tr1z0n
17.12.2007, 22:50
DNAT
This target is only valid in the nat table, in the PREROUTING and OUTPUT chains, and user-defined chains which are only called from those chains. It specifies that the destination address of the packet should be modified (and all future packets in this connection will also be mangled), and rules should cease being examined. It takes one option:
--to-destination <ipaddr>[-<ipaddr>][:port-port]
which can specify a single new destination IP address, an inclusive range of IP addresses, and optionally, a port range (which is only valid if the rule also specifies -p tcp or -p udp). If no port range is specified, then the destination port will never be modified.

iptables -t nat -A POSTROUTING -p tcp --dport 8888 -j DNAT --to-destination 1.1.1.1:80

Пробуй)