Проблема с Iptables

Discussion in 'Болталка' started by .W, 17 Dec 2007.

  1. .W

    .W Elder - Старейшина

    Joined:
    9 Aug 2007
    Messages:
    177
    Likes Received:
    228
    Reputations:
    33
    Собстно сабж
    iptables -t nat -A POSTROUTING -p tcp --dport 8888 -j DNAT --to-destination 1.1.1.1 --to-ports 80

    Почему оно не работает? Подскажите...
    Зы: срочно, ответ нужен в течении полутора часов..
    Заранее спасибо...
     
  2. tr1z0n

    tr1z0n Редиска

    Joined:
    13 Jan 2007
    Messages:
    44
    Likes Received:
    34
    Reputations:
    19
    DNAT
    This target is only valid in the nat table, in the PREROUTING and OUTPUT chains, and user-defined chains which are only called from those chains. It specifies that the destination address of the packet should be modified (and all future packets in this connection will also be mangled), and rules should cease being examined. It takes one option:
    --to-destination <ipaddr>[-<ipaddr>][:port-port]
    which can specify a single new destination IP address, an inclusive range of IP addresses, and optionally, a port range (which is only valid if the rule also specifies -p tcp or -p udp). If no port range is specified, then the destination port will never be modified.

    iptables -t nat -A POSTROUTING -p tcp --dport 8888 -j DNAT --to-destination 1.1.1.1:80

    Пробуй)