Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Pierre on January 27, 2003, 03:11:34 AM

Title: Port forwarding with iptables (SME 5.6)
Post by: Pierre on January 27, 2003, 03:11:34 AM

Hi all,

I've just upgraded to SME 5.6. I previously used the web front end for port forwarding and that worked fine.

As it doesn't work on 5.6 I can't figure how to do a port forwarding. (I searched the SME forum and man iptables, but didn't find anything helpful :-(  )

Please help !

I need to tcp forward port 4662 to 10.0.1.2:4662 and to udp forward 4666 to 10.0.0.2:4666 (At least that was the settings I used in SME 5.5)
(I use mldonkey)

Thanks for your replies !

Pierre.

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: Michiel on January 27, 2003, 01:36:35 PM

http://myezserver.com/downloads/mitel/contrib/portforwarding/

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: Richard Schiffelers on January 27, 2003, 05:16:28 PM

I am also looking for a 5.6 version of this port forwarding tool.

You refer to:

> http://myezserver.com/downloads/mitel/contrib/portforwarding/

Which for 5.6 refers to:

ftp://ftp.e-smith.org/pub/e-smith/dev/5.6dev/updates/

However this location does not exist !!! As far as i have been able to find out from other messages this was the location where during the beta fase of 5.6 this tool was to be found. Now that 5.6 has gone final there gone. Anybody know what happened to them ???

Grtz,

Richard

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: Andy Parkinson on January 28, 2003, 02:42:13 PM

I think the latest version of the port forwarding tab comes part of 5.6 final although it does seem flakey on my system.

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: Richard Schiffelers on January 28, 2003, 03:06:27 PM

If it comes part op version 5.6 final then please tell me where is it ??? I can't find it.

Grtz,

Richard

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: inhabitantofzion on January 28, 2003, 04:44:40 PM

That is odd as it works fine for me.

I found ntop flaky until I went up to a better system spec with
more RAM.

John

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: Steve Bush on January 28, 2003, 06:41:02 PM

It was moved to Charlie Brady's contribs directory as it isn't an official SME program.

ftp://ftp.ibiblio.org/pub/Linux/distributions/e-smith/contrib/CharlieBrady/RPMS/noarch/e-smith-portforwarding-0.1.0-20.noarch.rpm

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: Pierre on January 28, 2003, 07:36:52 PM

Well... I've tried...

I had first to install a newer version of e-smith-packetfilter because the one included in SME 5.6 was too old.

Then after insalling port forwarding, I have an entry in the menu : "port forwarding"

When I click on it, here is what I get...

FORM_TITLE

FIRST_PAGE_DESCRIPTION

NO_FORWARDS

Nothing else except the usual copyright note...
There is no link to add a new forward...

I am still stuck :-((

Any other Ideas ?

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: John on January 28, 2003, 09:24:53 PM

That is wierd.

I have it installed on mine and it seems to work fine.  Have you tried removing the rpm and doing a fresh compile?

I get the click here link on the server page and it takes me to the  page to tell it which ports to forward etc... If I select a port it loads it and takes you back to the window where it tells you that you have a port forwarding rule set on port XXX.

I have however not tried it out yet to see if it actually works.

John

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: Henrik on January 28, 2003, 10:00:03 PM

I've installed it too, and it worked like a charm?? I never got the 5.5 portforward with ipchains to work, but hey!! this one worked for me.

/Henrik

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: Pierre on January 29, 2003, 12:13:03 AM

I might be unlucky... but I really need to open some ports..

I dont care about fancy user interface, and will be happy if someone could just give me the command line to do the following :

- open (TCP) external  port 4662 for the internal machine 10.0.1.2 on port 4662
- open (UDP) external  port 4666 for the internal machine 10.0.1.2 on port 4666

As I said, reading man page or searching on groups didn't help me :-(

Thanks for any help !

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: Charlie Brady on January 29, 2003, 01:17:32 AM

Pierre wrote:

> Then after insalling port forwarding, I have an entry in the
> menu : "port forwarding"
>
> When I click on it, here is what I get...
>
> FORM_TITLE

That will be because the panel has no localization for your browser's language setting. Try setting it to "en".

Charlie

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: Joey P on January 29, 2003, 11:51:12 AM

NAT-HOWTO
http://www.netfilter.org/

Says:

  # Linux 2.4
  # Append a rule before routing (-A PREROUTING) to the NAT table (-t nat) that
  # TCP packets (-p tcp) going to 1.2.3.4 (-d 1.2.3.4) port 8080 (--dport 8080)
  # have their destination mapped (-j DNAT) to 192.168.1.1, port 80
  # (--to 192.168.1.1:80).
  iptables -A PREROUTING -t nat -p tcp -d 1.2.3.4 --dport 8080 \
          -j DNAT --to 192.168.1.1:80

Title: Re: Port forwarding with iptables (SME 5.6)
Post by: pierre on January 30, 2003, 12:52:47 AM

Thank all for your help.

It finally work.. the problem was that my browser was set to "french" instead of "english"...

That should be a good idea to fix that in future release of port-forwarding package (at least print in english)

Thank again for yours contribs

Pierre.