At 02:27 PM 2/15/2002 -0700, you wrote:
>Hi,
>
>This is the part that works... :-)  ...and all that is running right now.
>
>Internet is on eth1, Intranet is on eth0

Does your external address always resolve to the same IP?

It looks to me like you need to add a rule of the type

iptables -t nat -A PREROUTING -p protocol -i internal_interface \
-d external_ip_address --dport port -j DNAT --to internal_ip_address:port

for each of the services you want accessible from the internal network.

Then you will still need the

iptables -t nat -A POSTROUTING -d 10.0.0.55 \
         -s 10.0.0.0/255.255.255.0 -p tcp\
         --dport 80 -j SNAT --to 10.0.0.100

command in your POSTROUTING chain.

-- 
  Andrew M. Greenburg                   |   agreenbu   @  in-span   .   net
  Systems Engineer                      |   (317)234-1001     (317)234-1328
  Indiana Web Academy                   |   Phone             Fax


Reply via email to