Hi everyone,
I'm strugling to forward udp ports using the exact same procedure (but the -p UDP flag). It seems listed as all the other lines, but no traffic is registered and the stream just get to the host:
root@proxmox7:~# iptables -t nat -v -L -n --line-number
Chain PREROUTING (policy ACCEPT 29 packets, 2406 bytes)
num pkts bytes target prot opt in out source destination
1 677K 35M DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9833 to:192.168.1.12:3389
2 85 5182 DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6033 to:192.168.1.3:3306
3 144 6016 DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:20 to:192.168.1.4:20
4 2755 141K DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 to:192.168.1.4:21
5 12148 649K DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 to:192.168.1.2:80
6 10187 539K DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 to:192.168.1.2:443
7 310K 16M DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9834 to:192.168.1.2:9834
8 1898K 99M DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22226 to:192.168.1.21:22226
9 3398 191K DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8090 to:192.168.1.2:8090
10 0 0 DNAT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:50005 to:192.168.1.9
Chain INPUT (policy ACCEPT 3 packets, 156 bytes)
num pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 5 packets, 260 bytes)
num pkts bytes target prot opt in out source destination
1 7078K 443M MASQUERADE all -- * vmbr0 192.168.1.0/24 0.0.0.0/0
Firewall has been disabled on the LCX machine for testing and all the UDP ports are allowed for testing right now:
root@audiorecorder:/home/storage/cortador# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Am I missing something?
Best regards, Angel
I'm strugling to forward udp ports using the exact same procedure (but the -p UDP flag). It seems listed as all the other lines, but no traffic is registered and the stream just get to the host:
root@proxmox7:~# iptables -t nat -v -L -n --line-number
Chain PREROUTING (policy ACCEPT 29 packets, 2406 bytes)
num pkts bytes target prot opt in out source destination
1 677K 35M DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9833 to:192.168.1.12:3389
2 85 5182 DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6033 to:192.168.1.3:3306
3 144 6016 DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:20 to:192.168.1.4:20
4 2755 141K DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 to:192.168.1.4:21
5 12148 649K DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 to:192.168.1.2:80
6 10187 539K DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 to:192.168.1.2:443
7 310K 16M DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9834 to:192.168.1.2:9834
8 1898K 99M DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22226 to:192.168.1.21:22226
9 3398 191K DNAT tcp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8090 to:192.168.1.2:8090
10 0 0 DNAT udp -- vmbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:50005 to:192.168.1.9
Chain INPUT (policy ACCEPT 3 packets, 156 bytes)
num pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 5 packets, 260 bytes)
num pkts bytes target prot opt in out source destination
1 7078K 443M MASQUERADE all -- * vmbr0 192.168.1.0/24 0.0.0.0/0
Firewall has been disabled on the LCX machine for testing and all the UDP ports are allowed for testing right now:
root@audiorecorder:/home/storage/cortador# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Am I missing something?
Best regards, Angel