... snip ... > > Below I have listed the iptables command ... it tells me that there is > > "no chain/target/match by that name" Suggestions would be greatly > > appreciated. (obviously it does not work) > > > > iptables command > > > > $IPT -A PREROUTING -p TCP -d 172.16.5.47 --dport 1025 -j DNAT \ > > --to-destination 192.168.1.99:22 > > Add '-t nat' to get to the proper table. > > -- > Nate Carlson <natecars at real-time.com> | Phone : (952)943-8700 > http://www.real-time.com | Fax : (952)943-8500 That did take care of the error for the iptables command .. but it still does not make it through the firewall. The packets still die ... nothing makes it to the internal machine. I added the first command to just open up port 1025 from everywhere in the world ...hoping that it would help (apparently it didn't) CURRENT COMMANDS: $IPT -A tcp_inbound -p tcp -s 0/0 --destination-port 1025 -j ACCEPT $IPT -A tcp_inbound -p udp -s 0/0 --destination-port 1025 -j ACCEPT $IPT -t nat -A PREROUTING -p tcp -d 172.16.5.47 --dport 1025 -j DNAT \ --to-destination 192.168.1.99:22 LOG FILE MESSAGE Jun 17 12:25:49 server kernel: FORWARD packet died: IN=eth1 OUT=eth0 SRC=131.216 .114.113 DST=192.168.1.99 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=24688 DF PROTO=TCP SPT=42431 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0 COMMAND USED TO SSH ssh -p 1025 -l rclark 63.98.3.64 Other items of note: I am on a high speed wireless connection and my IP is an internal one ... behind their systems, but all ports are opened up so that my box appears wide open to the world. World IP is 63.98.3.64 ... internal IP is 172.16.5.47 ... so that is why this last ip address shows up on the log file. I also have two NICs on this system ... one for the internet and the other for the internal network. Do I have to do anything special in order to route it from the external IP (172.16.5.47) to the internal NIC (192.168.1.1) Thoughts of suggestions would be greatly appreciated ... thanks in advance. Randy _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota Help beta test TCLUG's potential new home: http://plone.mn-linux.org Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list