NAT (iptables) problem (help)

hi
I have a LAN (linux mandrake boxes, with IP 192.168.0.1 to 20). I have also a gateway (linux mandrake with 2 Network cards eth0 with real IP AAA.BBB.CCC.DDD and eth1 with 192.168.0.1).
What sould I do to redirect for example web request to 192.168.0.20 machine in the LAN...
I tried iptables...not working
(iptables -t nat -A PREROUTING -i eth0 -p tcp --dport www - j DNAT --to-dest 192.168.1.20 )

Should I use iptables on the gateway only or on the linux boxes on the LAN also?

What about SNAT?
is this correct
iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to- source AAA.BBB.CCC.DDD

Thanks
Rita

______________________________________________________
Boîte aux lettres - Lycos - http://www.lycos.fr

I found you also have to make sure you are allowing forwarding of port 80 to the host, and in some cases I've had to do postrouting something like:

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport www -j DNAT --to-dest 192.168.1.20 )

iptables -t nat -A POSTROUTING -o eth0 -p tcp --sport 80 -j SNAT --to-source xxx.xxx.xxx.xxx

iptables -A FORWARD -d 192.168.1.20 -p tcp -m tcp --dport 80 -j ACCEPT

Jeff Largent                   ImageLinks, Inc.
Sr System Admin                Melbourne, Fl 32935
(321) 253-0011                 fax:(321) 253-5559
perl -e 'print unpack(u, "3=W=W+FEM86=E;&EN:W,N8V]M\"@``");'

-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html