Re: SOLVED: "Performing cross-bridge DNAT requires IP forwarding to be enabled"

On Sat, Oct 09, 2004 at 07:16:10PM +0200, Jurjen Oskam wrote:

> connected via port eth2 of bridge eth3. My goal: TCP traffic with 
> destination port 80 coming in via bridgeport eth2 must be diverted
> to the webserver running on 127.0.0.1:80.
                              ^^^^^^^^^

This was the problem. Although I could have sworn that I also tried the
above with 192.168.1.1, I obviously didn't since it now works great with
the webserver running on 192.168.1.1:80. (The webserver is patched to
return the same HTML-document to every request, no matter what that
request was.)

So this works great:

iptables -t nat -A PREROUTING -m physdev --physdev-in eth2 -p tcp \
  --dport 80 -j DNAT --to 192.168.1.1:80

Sorry for this waste of time,
-- 
Jurjen Oskam
"I often reflect that if "privileges" had been called "responsibilities" or
"duties", I would have saved thousands of hours explaining to people why
they were only gonna get them over my dead body." - Lee K. Gleason, VMS sysadmin


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl