Re: [tlug] Firewalls

[Sigurd Urdahl <sigurdur@example.com>]

Phillip Tribble wrote:
> Greetings!
>
> I want to be able to forward port  999 on my server to port 22 on my 
> Desktop so I can view my desktop computer remotely at work (If ssh can 
> work, I will test VNC later)
>
> I tried the following and my nmap says the port is closed.
>
> #iptables -P FORWARD ACCEPT
> #iptables -t nat -A POSTROUTING -o lo -j MASQUERADE
> #iptables -t nat -A PREROUTING -p tcp -d rusher.webhop.org --dport 999 
> -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.0.127:22

Phil,

I believe you also need to ACCEPT the incoming traffic by adding 
something like this

iptables -A INPUT -p tcp -d rusher.webhop.org --dport 999 --state 
NEW,ESTABLISHED,RELATED -j ACCEPT


kind regards,
-sig

--
Sigurd Urdahl
Linux, goofing, cooking, making fire, computer security, having a
beer. Give me good music.