Re: DNAT on servicee

"Tsaousis, Costa" <[email protected]> Sun, 1 May 2016 21:45:25 +0300
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <CANL+VpaPUS6G0Y=D0Lewh3bJ+b6+RuumMvKbYsWosuJ7TiG75A@mail.gmail.com>
The firehol dnat statement, can do whatever your like:


# send to 10.0.0.10 all traffic towards 1.2.3.4
dnat to 10.0.0.10 dst 1.2.3.4

# send to 10.0.0.10 all TCP traffic towards 1.2.3.4 port tcp/1000:2000
dnat to 10.0.0.10 dst 1.2.3.4 proto tcp dport 1000:2000

etc.

Costa



On Sun, May 1, 2016 at 2:03 PM, Celedhrim <[email protected]> wrote:

> Hi,
>
>
> I currently try to translate my old pure iptables script to firehol.
>
> But I cannot find how to dnat a service.
>
>
> Let me explain , a simple service is easy to DNAT, but for example , xbox
> service
>
>
> I need to dnat all port to my xbox , so in interface , easy to accept ,
> but in dnat rules , I need to define all port one by one.
>
>
> Maybe I don't understand something , but I think it would more easy to nat
> a service to nat multiple port.
>
> _______________________________________________
> Firehol-support mailing list
> [email protected]
> http://lists.firehol.org/mailman/listinfo/firehol-support
_______________________________________________
Firehol-support mailing list
[email protected]
http://lists.firehol.org/mailman/listinfo/firehol-support