setting up virtual box to SNAT/DNAT

[Madison Kelly]

Dave Cramer wrote:
> I'm trying to setup asterisk inside a virtual box vm on a host with
> only one interface. The host is running ubuntu 6.06, and virtualbox
> 2.2
> 
> I can get the host to talk out, but I can't DNAT ports
> 
> I've setup a bridge device
> 
> # VirtualBox NAT bridge
> auto vnet0
> iface vnet0 inet static
>         address 172.16.0.1
>         netmask 255.255.255.0
>         bridge_ports none
>         bridge_maxwait 0
>         bridge_fd 1
> 
> 
> Here are the iptables rules
> 
>  iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 10022 -j
> DNAT --to-destination 172.16.0.113:22
>  iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
>  iptables -A FORWARD -i eth0 -o vnet0 -m state --state NEW -j ACCEPT
>  iptables -A FORWARD -o eth0 -i vnet0 -m state --state NEW -j ACCEPT
>  iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> 
> 
> if I telnet into port 10022 the guest sees the incoming packet on port
> 22, but it doesn't go back properly.
> 
> Any help would be greatly appreciated.
> 
> Dave

There is a difference:

 >         address 172.16.0.1

and

 >  iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 10022 -j
 > DNAT --to-destination 172.16.0.113:22

Is this intentional, or a type? I know I make enough of them. :P If not, 
how do you route traffic?

Madi
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists