Can you ping 192.168.0.2 from the firewall itself? In other words
don't you have any routing problem?

Ramin

On Tue, May 21, 2002 at 06:16:10PM -0700, [EMAIL PROTECTED] wrote:

> I've done this MANY times (juts want to map a public IP with a private 
> one):
> 
> #!/bin/sh
> IPTABLES="/sbin/iptables"
> 
> $IPTABLES -F INPUT
> $IPTABLES -F OUTPUT
> $IPTABLES -F FORWARD
> $IPTABLES -F -t nat
> $IPTABLES -F -t mangle
> 
> modprobe iptable_nat
> echo 1 >/proc/sys/net/ipv4/ip_forward
> 
> $IPTABLES -t nat -A PREROUTING -i eth0 -d x.x.x.x -j DNAT --to 
> 192.168.0.2
> 
> $IPTABLES -P INPUT ACCEPT
> $IPTABLES -P OUTPUT ACCEPT
> $IPTABLES -P FORWARD ACCEPT
> 
> 
> And it does *NOT* send any packet to 192.168.0.2 !
> The firewall box itself does have another IP.
> 
> What can be happening ?
> 
> I use: 
> Mandrake 8.1 (2.4.8-34.1mdk)
> IPtables verion: 1.2.4-1.1mdk
> 
> and:
> 
> #cat /proc/sys/net/ipv4/ip_forward
> 1
> 
> 
> I know is stupid, mostly because i have this same configuration up and 
> running in another box. Any place to look at ?
> 
> 
> Thanks.
> 

Reply via email to