miniupnp.tuxfamily.org Forum Index miniupnp.tuxfamily.org
The forum about miniupnp and libnatpmp
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Ip forward

 
Post new topic   Reply to topic    miniupnp.tuxfamily.org Forum Index -> miniupnpd Compilation/Installation
View previous topic :: View next topic  
Author Message
DarkHack



Joined: 07 Feb 2014
Posts: 5
Location: Gray

PostPosted: Fri Feb 07, 2014 9:49 am    Post subject: Ip forward Reply with quote

Hi the team.
For begin, congratulation for your work.
Well, I use upnpd 1.8 on debian,
and I had understand the daemon init my netfilter
with new chain named MINIUPNPD
and when he receive an request he had to this new chain something like :
-A MINIUPNPD -d 10.192.85.3/32 -p tcp -m tcp --dport 80 -j ACCEPT
and with the init of chaine with :
$IPTABLES -t nat -A PREROUTING -i $EXTIF -j MINIUPNPD
all is magic and is work fine...
But I'm little sad, when I look my apache log.
all ip come from of my gateway... hard to see who are the bad, and who are the good in my apache log...
I thing in my knowledge, the chain to had, has to been something like :
-t nat -A MINIUPNPD -p tcp -d $IP_WAN --dport 80 -j DNAT --to-destination 10.192.85.3:80
something like that?
for only dnat the address and keep the snat source ip?
It's possible, I miss something, I don't understand all in my netfilter,
and if you have any solution... I ready to heard...
Thank a lot...
Nico
Back to top
View user's profile Send private message
miniupnp
Site Admin


Joined: 14 Apr 2007
Posts: 1589

PostPosted: Sat Feb 08, 2014 10:27 am    Post subject: Reply with quote

NAT shouldn't change the originating IP, so you should have the origninal IP in your apache logs.
_________________
Main miniUPnP author.
https://miniupnp.tuxfamily.org/
Back to top
View user's profile Send private message Visit poster's website
DarkHack



Joined: 07 Feb 2014
Posts: 5
Location: Gray

PostPosted: Sat Feb 08, 2014 11:21 am    Post subject: Reply with quote

sur?
All right, I will go to see in my bridge configuration.
thanks
Back to top
View user's profile Send private message
DarkHack



Joined: 07 Feb 2014
Posts: 5
Location: Gray

PostPosted: Sat Feb 08, 2014 11:51 am    Post subject: Reply with quote

I'm so sorry, I forget an apache2-proxy,
aptitude remove apache2 was not enought...
apache2-bin apache-mpm-fork...ect
You was really right...
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    miniupnp.tuxfamily.org Forum Index -> miniupnpd Compilation/Installation All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group
Protected by Anti-Spam ACP
© 2007 Thomas Bernard, author of MiniUPNP.