[ILUG] iptables & DNAT

[Fergal Moran]

Ok - I have ditched Smoothwall because it won't do what I want and I am
going with 2.4 and iptables - which is doing masquerading very nicely indeed
at the moment.

What I have so far is this
1 internal NIC used as LAN gateway (eth1)
1 external NIC connected to router (eth0) 

I have assigned a range of public IP addresses to the external NIC and I can
ping these from outside the LAN.  Now I want to forward all http requests
coming in on the external NIC to our webserver on 192.168.1.6 so I issued

[root at pasteur /]# iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth0 -j
DNAT --to 192.168.1.6:80

but nothing - all incoming web requests are still serviced by external NIC
and are not translated to the internal address

oddly an iptables -L produces

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

as if there are no rules defined..

What am I missing folks?

Cheers,

Fergal..
P.S. If I wish to make these rules persistant across reboots - then where is
the best place for them?
--  
WASP Technologies
http://www.wasptech.com
Wireless Application Solutions Provider