miniupnp.tuxfamily.org

[DarkHack]

Hi the team.
For begin, congratulation for your work.
Well, I use upnpd 1.8 on debian,
and I had understand the daemon init my netfilter
with new chain named MINIUPNPD
and when he receive an request he had to this new chain something like :
-A MINIUPNPD -d 10.192.85.3/32 -p tcp -m tcp --dport 80 -j ACCEPT
and with the init of chaine with :
$IPTABLES -t nat -A PREROUTING -i $EXTIF -j MINIUPNPD
all is magic and is work fine...
But I'm little sad, when I look my apache log.
all ip come from of my gateway... hard to see who are the bad, and who are the good in my apache log...
I thing in my knowledge, the chain to had, has to been something like :
-t nat -A MINIUPNPD -p tcp -d $IP_WAN --dport 80 -j DNAT --to-destination 10.192.85.3:80
something like that?
for only dnat the address and keep the snat source ip?
It's possible, I miss something, I don't understand all in my netfilter,
and if you have any solution... I ready to heard...
Thank a lot...
Nico

[miniupnp]

NAT shouldn't change the originating IP, so you should have the origninal IP in your apache logs.
_________________
Main miniUPnP author.
https://miniupnp.tuxfamily.org/

[DarkHack]

sur?
All right, I will go to see in my bridge configuration.
thanks

[DarkHack]

I'm so sorry, I forget an apache2-proxy,
aptitude remove apache2 was not enought...
apache2-bin apache-mpm-fork...ect
You was really right...