Need to set up iptables

hello ng!

im very newbee around linux - but i have a software router with suse
linux running on it. now i need to forward some ports to the ip of my
computer. but i dont know how to set up iptables to do this for me :/ my
computer has a fix ip.

thx 4 answering

greetings,
jan

On Tue, 22 Jun 2004 15:31:30 +0200, Jan Habbo Brüning wrote:

> hello ng!
>
> im very newbee around linux - but i have a software router with suse
> linux running on it. now i need to forward some ports to the ip of my
> computer. but i dont know how to set up iptables to do this for me :/ my
> computer has a fix ip.
>
> thx 4 answering
>
> greetings,
> jan

Hi Jan
I'm not sure if you want to Forward trafic to an internal server (iptables
- DNAT) or just, say from work, forward traffic to your home box (ssh).

Eitherway, the man pages should be a good start.

Give us more info if you need more help.
Ed.

On Tue, 22 Jun 2004 19:24:25 +0200, Ed <(E-Mail Removed)> wrote:
>
>
> On Tue, 22 Jun 2004 15:31:30 +0200, Jan Habbo Brüning wrote:
>
>> hello ng!
>>
>> im very newbee around linux - but i have a software router with suse
>> linux running on it. now i need to forward some ports to the ip of my
>> computer. but i dont know how to set up iptables to do this for me :/ my
>> computer has a fix ip.
>>
>> thx 4 answering
>>
>> greetings,
>> jan
>
> Hi Jan
> I'm not sure if you want to Forward trafic to an internal server (iptables
> - DNAT) or just, say from work, forward traffic to your home box (ssh).
>
> Eitherway, the man pages should be a good start.
>
> Give us more info if you need more help.
> Ed.

There's also a howto:

http://netfilter.filewatcher.org/

http://netfilter.samba.org/

http://netfilter.gnumonks.org/

One of those should still be up.

AC

On Tue, 22 Jun 2004 19:47:18 GMT, Alan Connor <(E-Mail Removed)> wrote:
>
>
> On Tue, 22 Jun 2004 19:24:25 +0200, Ed <(E-Mail Removed)> wrote:
>>
>>
>> On Tue, 22 Jun 2004 15:31:30 +0200, Jan Habbo Brüning wrote:
>>
>>> hello ng!
>>>
>>> im very newbee around linux - but i have a software router with suse
>>> linux running on it. now i need to forward some ports to the ip of my
>>> computer. but i dont know how to set up iptables to do this for me :/ my
>>> computer has a fix ip.
>>>
>>> thx 4 answering
>>>
>>> greetings,
>>> jan
>>
>> Hi Jan
>> I'm not sure if you want to Forward trafic to an internal server (iptables
>> - DNAT) or just, say from work, forward traffic to your home box (ssh).
>>
>> Eitherway, the man pages should be a good start.
>>
>> Give us more info if you need more help.
>> Ed.
>
> There's also a howto:
>
> http://netfilter.filewatcher.org/
>
> http://netfilter.samba.org/
>
> http://netfilter.gnumonks.org/
>
> One of those should still be up.
>
> AC
>
>

Here's an amazing tutorial for iptables:


http://iptables-tutorial.frozentux.n...orial.html.tgz

AC

>>>Hi Jan
>>>I'm not sure if you want to Forward trafic to an internal server (iptables
>>>- DNAT) or just, say from work, forward traffic to your home box (ssh).

in fact, i dont know ill try to explain my situation so u can figure
out, what im dealing with ... im behind a software router who routes the
internet into my lan. an unwanted result of using this router seems to
be, that some ports are not available for my computer to send through or
to be reachable within.

>>>Eitherway, the man pages should be a good start.

i tried but failed because of my leak of linux knowledge :/

>>>Give us more info if you need more help.

from iptables i got this using iptables --list:

Chain FORWARD (policy DROP)
target prot opt source destination
DROP all -- anywhere anywhere unclean
DROP all -- anywhere anywhere state INVALID
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp dpt:27011
ACCEPT udp -- anywhere anywhere udp dpt:27015
ACCEPT tcp -- anywhere anywhere tcp
dpts:4661:4663
ACCEPT udp -- anywhere anywhere udp
dpts:4671:4673
REJECT icmp -- anywhere anywhere icmp
echo-request reject-with icmp-port-unreachable
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED

if i use the port 4671 (udp) everything works, but i have to switch
permanently back to port 4661 (tcp) for some actions. i found out this
by try and error. i believe, the port 4671 should be enabled for tcp
protocol too and thats all i need


please forgive my bad english, i hope u understand what im trying to
explain


greetings,
jan