On Thu, Jan 3, 2013 at 3:37 AM, Jorge Fábregas wrote:
Ok, I've posted a similar setup I've used in the past that
worked like a
charm. The script is the actual /etc/sysconfig/iptables. You'll notice
the syntax there is somehow different than when you manually create the
rules (or put in a script) but you get the idea. Those rules WERE THE
MINIMUM required in order to let a machine on internet reach a machine
on the internal network (port 8,555). Ask me any question if you don't
understand a line (please specify line number in question).
eth0 is WAN, eth1 is LAN. Notice how I use "-i" and "-o" for the
NICs.
http://fpaste.org/sdPF/
Just to follow up on this, I had nothing but trouble from the portal
server. Everything I did seemed to break unrelated stuff and none of it
made any sense. It was very frustrating, and that was really why I came
here to ask.
Anyway, I finally gave up. To save time and what was left of my sanity, I
just installed another server parallel to portal, implemented rules based
on your example above, and called it a day. The new server *only* handles
the masqueraded connections to the internal server.
Thanks for the tips!
-Alan