On 05/12/2018 04:41 AM, David Ventura wrote:
> I'm trying to do port forwarding with DNAT and it is working for some
> ports. On others I get garbage, example:
> 
> DNAT            net             loc:192.168.2.160:443
> <http://192.168.2.160:443>   tcp 444
> DNAT            net             loc:192.168.2.160:443
> <http://192.168.2.160:443>   tcp
> 

The second rule must be:

  DNAT  net     loc:192.168.2.160:443   tcp     443

or simply

  DNAT  net     loc:192.168.2.160       tcp     443

The rule you have is forwarding *all* tcp requests to your https server.

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to