iptables dnat problem

["Michael" <michael () insulin-pumpers org>]

I have a mail daemon running on a border system bound to port 25, 
INADDR_ANY

I'd like to run another smtp daemon on a virtual IP address on the same 
system. I have the new daemon running on port 10025

iptables -t nat -A PREOUTING -p tcp 
     -d $SECOND_IP -dport 25 REDIRECT --to-port 10025

The daemon responds just fine to other hosts located on the same /24 as 
the localhost, however remote hosts a hop or two away never seem to get 
connected. This method seems to work fine for UDP ... I run a second 
name server on this host configured as an RBL. Suggestions ???

Michael

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards