| well, the thing is, I don't even know why it won't work... so I don't
| know what rule I should add... the rule I have now is something like:
|
| iptables -t nat -A PREROUTING -i eth0 -p tcp -d $IP --dport 8080 -j
| DNAT --to 192.168.1.10:80
|
| iptables -A FORWARD -i eth1 -o eth1 -p tcp -d 192.168.1.10 --dport 80
| -j ACCEPT
|
| where $IP is the ip of the box connected to the internet, and
| 192.168.1.10 is where the wiki is located.
I'm not sure if I understand everything you're trying to do, but:
- Why don't the internal machines simply go straight to 192.168.1.10?
- If you don't want that, and you want to redirect the internal
traffic, the above rules look wrong. The first rule applies to
packets arriving at your gateway machine on eth0. The second
applies to packets arriving AND leaving on eth1. So on the face of
it, these two rules have nothing to do with each other.
If you want to send me mail offline, I may be able to help further.
Please send more info (I only just re-joined this list, so I missed
your original posting), including which interface is the internal and
which is the external.
Terry