On Thu, Jan 3, 2013 at 3:37 AM, Jorge Fábregas wrote: > Ok, I've posted a similar setup I've used in the past that worked like a > charm. The script is the actual /etc/sysconfig/iptables. You'll notice > the syntax there is somehow different than when you manually create the > rules (or put in a script) but you get the idea. Those rules WERE THE > MINIMUM required in order to let a machine on internet reach a machine > on the internal network (port 8,555). Ask me any question if you don't > understand a line (please specify line number in question). > > eth0 is WAN, eth1 is LAN. Notice how I use "-i" and "-o" for the NICs. > > http://fpaste.org/sdPF/ >
Just to follow up on this, I had nothing but trouble from the portal server. Everything I did seemed to break unrelated stuff and none of it made any sense. It was very frustrating, and that was really why I came here to ask. Anyway, I finally gave up. To save time and what was left of my sanity, I just installed another server parallel to portal, implemented rules based on your example above, and called it a day. The new server *only* handles the masqueraded connections to the internal server. Thanks for the tips! -Alan
-- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
