Yes sir! This simple solution worked in the first try!!!
Thanks man! 

iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080

iptables -A INPUT -p tcp --dport 8080 -j ACCEPT



-----Original Message-----
From: Gaël Lams [mailto:[EMAIL PROTECTED] 
Sent: Friday, October 20, 2006 2:43 AM
To: Tomcat Users List
Subject: Re: IPTABLES

> Im running a tomcat in port 80 without httpd I want redirect packages 
> from 80 to 8080 because tomcat is running as tomcat user (cant run as 
> other non root under port 1025) and I tried the IPTABLES redirection 
> aproach but doesnt work

I performed the same setup to have tomcat running on 8080 but users connecting 
on port 80. The following should work:

# Forward request from port 80 to tomcat listening on port 8080 # REDIRECT is a 
specialized case of Destination NAT: it is exactly equivalent to doing DNAT to 
the address of the incoming interface.
# as with DNAT, it can be used only in PREROUTING and OUTPUT iptables -t nat -A 
PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080

# PREROUTING happens before INPUT, therefore the INPUT rule needs to allow the 
translated packet, not the original one.
iptables -A INPUT -p tcp --dport 8080 -j ACCEPT

Regards,

Gaël

This message (including any attachments) contains confidential
and/or proprietary information intended only for the addressee.
Any unauthorized disclosure, copying, distribution or reliance on
the contents of this information is strictly prohibited and may
constitute a violation of law.  If you are not the intended
recipient, please notify the sender immediately by responding to
this e-mail, and delete the message from your system.  If you
have any questions about this e-mail please notify the sender
immediately.

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to