Topic: Port forwarding with iptables (SME 5.6)

[Pierre]

Hi all,

I've just upgraded to SME 5.6. I previously used the web front end for port forwarding and that worked fine.

As it doesn't work on 5.6 I can't figure how to do a port forwarding. (I searched the SME forum and man iptables, but didn't find anything helpful  )

Please help !

I need to tcp forward port 4662 to 10.0.1.2:4662 and to udp forward 4666 to 10.0.0.2:4666 (At least that was the settings I used in SME 5.5)
(I use mldonkey)

Thanks for your replies !

Pierre.

[Michiel]

http://myezserver.com/downloads/mitel/contrib/portforwarding/

[Richard Schiffelers]

I am also looking for a 5.6 version of this port forwarding tool.

You refer to:

> http://myezserver.com/downloads/mitel/contrib/portforwarding/

Which for 5.6 refers to:

ftp://ftp.e-smith.org/pub/e-smith/dev/5.6dev/updates/

However this location does not exist !!! As far as i have been able to find out from other messages this was the location where during the beta fase of 5.6 this tool was to be found. Now that 5.6 has gone final there gone. Anybody know what happened to them ???

Grtz,

Richard

[Andy Parkinson]

I think the latest version of the port forwarding tab comes part of 5.6 final although it does seem flakey on my system.

[Richard Schiffelers]

If it comes part op version 5.6 final then please tell me where is it ??? I can't find it.

Grtz,

Richard

[inhabitantofzion]

That is odd as it works fine for me.

I found ntop flaky until I went up to a better system spec with
more RAM.

John

[Steve Bush]

It was moved to Charlie Brady's contribs directory as it isn't an official SME program.

ftp://ftp.ibiblio.org/pub/Linux/distributions/e-smith/contrib/CharlieBrady/RPMS/noarch/e-smith-portforwarding-0.1.0-20.noarch.rpm

[Pierre]

Well... I've tried...

I had first to install a newer version of e-smith-packetfilter because the one included in SME 5.6 was too old.

Then after insalling port forwarding, I have an entry in the menu : "port forwarding"

When I click on it, here is what I get...

FORM_TITLE

FIRST_PAGE_DESCRIPTION

NO_FORWARDS

Nothing else except the usual copyright note...
There is no link to add a new forward...

I am still stuck (

Any other Ideas ?

[John]

That is wierd.

I have it installed on mine and it seems to work fine.  Have you tried removing the rpm and doing a fresh compile?

I get the click here link on the server page and it takes me to the  page to tell it which ports to forward etc... If I select a port it loads it and takes you back to the window where it tells you that you have a port forwarding rule set on port XXX.

I have however not tried it out yet to see if it actually works.

John

[Henrik]

I've installed it too, and it worked like a charm?? I never got the 5.5 portforward with ipchains to work, but hey!! this one worked for me.

/Henrik

[Pierre]

I might be unlucky... but I really need to open some ports..

I dont care about fancy user interface, and will be happy if someone could just give me the command line to do the following :

- open (TCP) external  port 4662 for the internal machine 10.0.1.2 on port 4662
- open (UDP) external  port 4666 for the internal machine 10.0.1.2 on port 4666

As I said, reading man page or searching on groups didn't help me

Thanks for any help !

[Charlie Brady]

Pierre wrote:

> Then after insalling port forwarding, I have an entry in the
> menu : "port forwarding"
>
> When I click on it, here is what I get...
>
> FORM_TITLE

That will be because the panel has no localization for your browser's language setting. Try setting it to "en".

Charlie

[Joey P]

NAT-HOWTO
http://www.netfilter.org/

Says:

  # Linux 2.4
  # Append a rule before routing (-A PREROUTING) to the NAT table (-t nat) that
  # TCP packets (-p tcp) going to 1.2.3.4 (-d 1.2.3.4) port 8080 (--dport 8080)
  # have their destination mapped (-j DNAT) to 192.168.1.1, port 80
  # (--to 192.168.1.1:80).
  iptables -A PREROUTING -t nat -p tcp -d 1.2.3.4 --dport 8080 \
          -j DNAT --to 192.168.1.1:80

[pierre]

Thank all for your help.

It finally work.. the problem was that my browser was set to "french" instead of "english"...

That should be a good idea to fix that in future release of port-forwarding package (at least print in english)

Thank again for yours contribs

Pierre.