Click to See Complete Forum and Search --> : help to solve problem with iptables.
alexey androsov
08-14-2002, 03:54 AM
i have iptables 1.2.3 redhat linux kernel 2.4.7-10
need to do mapping of 25 and 110 ports on gate for internal mailserver.
when i try to put string : iptables -A PREROUTING -i eth1 -p tcp -m tcp --dport 25 -j DNAT --to (ip_addr_internal_server) there are many messages those informs : incorrect module parameters. and at the end : "perhaps iptables or kernel needs to be upgraded". how could i solve this problem ? :(
or suggest me, how can i do mapping another way. very need. i'm very newbie to linux :x
Lorithar
08-14-2002, 10:19 AM
iptables -A PREROUTING -i eth1 -p tcp -m tcp --dport 25 -j DNAT --to
should be
iptables -A PREROUTING -i eth1 -p tcp --dport 25 -j DNAT --to-destination [ipaddress]
I don't know where you got that -m tcp from.
You might want to have
-m state --state NEW,ESTABLISHED, RELATED
in there...
alexey androsov
08-14-2002, 07:38 PM
[root@gate52 root]# iptables -A PREROUTING -i eth1 -p tcp --dport 25 -j DNAT --to-destination 192.168.0.201
/lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ip_tables.o: init_module: Device or resource busy
Hint: insmod errors can be caused by incorrect module parameters, including invalid IO or IRQ parameters
/lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ip_tables.o: insmod /lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ip_tables.o failed
/lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ip_tables.o: insmod ip_tables failed
iptables v1.2.3: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
[root@gate52 root]#
:( :( :( :(
can someone help me ? what should i do.
alexey androsov
08-14-2002, 07:53 PM
sorry.
rmmod ipchains
insmod ip_tables
iptables -A PREROUTING -i eth1 -p tcp --dport 25 -j DNAT --to (ip_address)
message out:
iptables: No chain/target/match by that name
what's wrong now ? :x :confused:
alexey androsov
08-14-2002, 10:26 PM
thanx. i did that :-)
now switching to postfix problems :-)