I have a linux based router setup for a small subnet. There are devices in the subnet that need to be controlled from outsie so I implemented port forwarding to take packets from the outside iface to the inside iface. I chose ports 13300 to 13399 to determine where to forward a packet.
for example sending a packet to 10.10.0.218:13313 forwards to 192.168.0.13:80
the packet dies. here is the log intry in messages:Aug 14 13:45:52 PW5810GC-RTR kernel: FORWARD packet died: IN=eth1 OUT=eth0 SRC=10.10.0.117 DST=192.168.0.13 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=51505 DF PROTO=TCP SPT=1204 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 with and deliniating the log entry.
my iptables entry looks like this:
-A PREROUTING -p tcp -m tcp -s 10.10.0.218 -i eth1 –dport 13313 -j DNAT –to-destination 192.168.0.13:80
looking at the log entry it appears that this rule was applied. what am I doing wrong? where should I look and for what?
