Hi all.

I'm doing 1 to 1 nat to map an internal IP address to an external, world
accessible IP. I use the following rules:

$iptables -A FORWARD -i eth2 -d $EXTERNAL_IP -j ACCEPT
$iptables -t nat -A PREROUTING -i eth2 -d $EXTERNAL_IP -j DNAT --to $INTERNAL_IP

The architecture is as follows (sorry if too wide):

                     _________                    _________________
               eth2 |         | eth0        eth0 |                 | eth3      
$INTERNAL_IP
(WORLD)<------------| Gateway |------------------| Internal Router 
|--------+--(INTERNAL MACHINE)
        $EXTERNAL_IP|_________|                  |_________________|        |
                                                                            \___ More 
Internal
                                                                             \__ 
Machines ....


The problem is that I am unable to access the internal machine with
$INTERNAL_IP from any of the other internal machines, through $EXTERNAL_IP.

I failed to see a solution for this problem. Any ideas?

                            
-- 
Jose Celestino <[EMAIL PROTECTED]> SysAdmin::SAPO.pt http://www.sapo.pt
---------------------------------------------------------------------
main(){printf("%xu%xk%x!\n",15,12,237);}

Reply via email to