Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: mark on September 05, 2006, 12:04:08 PM

Title: iptables question for second external ip address
Post by: mark on September 05, 2006, 12:04:08 PM

Hi

I have added a second external ip address to a sme 7 box and it works fine. I created a couple of custom fragments to redirect all port forwards via the second ip address and that works fine also.

If I open a port using the "config set u1759 service TCPPort 17159 access public status enabled" process it works fine and iptables -L says:

ACCEPT     tcp  --  anywhere             10.1.2.55           tcp dpt:17159
denylog    tcp  --  anywhere             10.1.2.55           tcp dpt:17159

if I create custom masq fragments to point some port openings to the second external ip and do a signal-event remoteaccess-update I get :

ACCEPT     tcp  --  anywhere             10.1.2.56           tcp dpt:17159
denylog    tcp  --  anywhere             10.1.2.56           tcp dpt:17159

which looks OK to me but doesnt allow external access via the second ip address.

Does anyone have any idea what I am missing

all help appreciated

Mark