It appears you have half of it right. What you're missing is the rule to make your forwarded traffic from 192.168.1.2 look like it's coming from 192.168.1.1. Try something like: (May contain typos... but it will at least point you in the right direction) iptables -t nat -I PREROUTING -d 192.168.1.1 -p tcp --dport 110 -j DNAT --to 192.168.1.2 iptables -t nat -I POSTROUTING -s 192.168.1.2 -j SNAT --to 192.168.1.1 Also make sure that you have forwarding turned on, and that should be all there is to it... Brian Cluff elemint@hotpop.com wrote: > I am trying to port forward on tcp port 110 but I keep getting > "telnet: Unable to connect to remote host: Connection refused" > > > backround information: > localhost 192.168.1.1 > email server 192.168.1.2 > > > I get connection refused when I try any of the following commands > > telnet localhost 110 > telnet 192.168.1.1 110 > > The only one that works is telnet 192.168.1.2 110 > > > The command to configure port forwarding: > iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 110 -j > DNAT --to-destination 192.168.1.2 > > > > > > The output from iptagbles -L -t -nat > > DNAT tcp -- anywhere anywhere tcp dpt:pop3 > to:192.168.1.2 > > > I have also looked at tcpdump but there are no headers that come across > the interface when I get an access denied, so it seems the kernel might > be stopping it before it gets on the wire. > > > > > Jim > > --------------------------------------------------- > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us > To subscribe, unsubscribe, or to change you mail settings: > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss > --------------------------------------------------- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change you mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss