Re: [CentOS] DNAT PREROUTING issue with iptables

2007-09-25 Thread Alain Spineux
Without all the rules, it's not easy to reply. Your NAT rules looks fine but some filter are missing (I thing). FW1 should also accept to FORWARD port 25 If you use rules including --state NEW, you must have other rules like iptables -t filter -A INPUT/FORWARD -m state --state ESTABLISHED,RELATE

[CentOS] DNAT PREROUTING issue with iptables

2007-09-24 Thread Indunil Jayasooriya
Hi, I have an DNAT ISSUE with PREROUTING. This is my setup. I have 2 firewalls running iptables. Pls asume 1.2.3.4/29 is the internet interace of FIRST firewall. 2.3.4.5/29 is the internet interface of SECOND firewall. it has DMZ zone. in that DMZ zone, mail server runnig @ 192.168.100.3 Now I