Port forwarding, again

Hi,

I posted this same question 2 weeks ago but with no real
answer that can solve this problem...
I'm trying to solve this quite some time.

Well this is the problem.

10.254.254.100 is AXIS IP cammera, when you restart camera it's
sending UDPs to 255.255.255.255,to port 67 (this is manufacturer
specification and also RFC bootp specification, I can't change that).
So anyone(bootp server) can receive that bootp request
and send reply back to camera to set up new IP address of camera.
So camera is bootp client and my software is bootp server, my software
is on 10.254.254.1, but because my app. is not root it can't receive
that UDPs on port 67 and I have to forward UDPs on some other port
that I can bind to, > 1024.
Of course on windows, app is working.

My question is what IPTABLES combination I have to use for this.
I tried this one
iptables -t nat -A PREROUTING -i 10.254.254.1 -p udp --dport 67 -j
REDIRECT --to-port 6700

and this one
iptables -t nat -A OUTPUT -p udp -d 10.254.254.1 --dport 67 -j
REDIRECT --to 6700

but with no result, tcpdump on port 6700 is not detecting any packets
received.

Thanks

UK wrote:

> Hi,
>
> I posted this same question 2 weeks ago but with no real
> answer that can solve this problem...
> I'm trying to solve this quite some time.
>
> Well this is the problem.
>
> 10.254.254.100 is AXIS IP cammera, when you restart camera it's
> sending UDPs to 255.255.255.255,to port 67 (this is manufacturer
> specification and also RFC bootp specification, I can't change that).
> So anyone(bootp server) can receive that bootp request
> and send reply back to camera to set up new IP address of camera.
> So camera is bootp client and my software is bootp server, my software
> is on 10.254.254.1, but because my app. is not root it can't receive
> that UDPs on port 67 and I have to forward UDPs on some other port
> that I can bind to, > 1024.
> Of course on windows, app is working.
>
> My question is what IPTABLES combination I have to use for this.
> I tried this one
> iptables -t nat -A PREROUTING -i 10.254.254.1 -p udp --dport 67 -j
> REDIRECT --to-port 6700
>
> and this one
> iptables -t nat -A OUTPUT -p udp -d 10.254.254.1 --dport 67 -j
> REDIRECT --to 6700
>
> but with no result, tcpdump on port 6700 is not detecting any packets
> received.
>
> Thanks

If you are running the rule on your app PC try -i 255.255.255.255 or eth0
etc. instead of -i 10.254.254.1.

Andy.