OpenVZ Forum


Home » General » Support » *SOLVED* port 3754 routing udp & tcp - doesn't work
*SOLVED* port 3754 routing udp & tcp - doesn't work [message #24749] Sun, 09 December 2007 14:03 Go to next message
Kutschka is currently offline  Kutschka
Messages: 24
Registered: February 2007
Junior Member
[Editid and translated to english]
Hello,

I have installed on a VE (has local IP:192.168.1.8) Ventrilo .. Used are port 3754 (UDP and TCP)..

But ıt does not work...

What I did:

On creation VE
vzctl set 1005 --iptables iptable_nat --save;


emacs /etc/init.d/vz
Added below:
iptables -t nat -P PREROUTING ACCEPT

//- How to provide access for VE to Internet
iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to MY_PUBLIC_IP

//- How to provide access from Internet to a VE
iptables -t nat -P PREROUTING ACCEPT

iptables -t nat -A PREROUTING -p tcp -d 192.168.1.8 --dport
 3784 -i eth0 -j DNAT --to-destination MY_PUBLIC_IP:3784

iptables -t nat -A PREROUTING -p udp -d 192.168.1.8 --dport
 3784 -i eth0 -j DNAT --to-destination MY_PUBLIC_IP:3784

iptables -t nat -A PREROUTING -p TCP --dport 3784
 -j DNAT --to-destination 192.168.1.8:3784

- In dem VE
/sbin/iptables -t nat -A POSTROUTING -s ! 192.168.1.8
 -o venet0 -j SNAT --to-source 192.168.1.8


Can anyone help me, what is here wrong?

Thank you...
Kutschka

[Updated on: Fri, 14 December 2007 17:35]

Report message to a moderator

Re: port 3754 routing udp und tcp - geht nicht [message #24751 is a reply to message #24749] Sun, 09 December 2007 14:21 Go to previous messageGo to next message
kir is currently offline  kir
Messages: 1645
Registered: August 2005
Location: Moscow, Russia
Senior Member

I'm afraid there are not too many English-speaking people here -- please use German forum. Oh, I see you already did that. OK then.


Kir Kolyshkin
http://static.openvz.org/userbars/openvz-developer.png
Re: port 3754 routing udp und tcp - geht nicht [message #24752 is a reply to message #24749] Sun, 09 December 2007 14:21 Go to previous messageGo to next message
Kutschka is currently offline  Kutschka
Messages: 24
Registered: February 2007
Junior Member
Sorry.. wrong forum.. I can't delete this entry.. (No delete button) But I did copy it to the german forum... (and translated here too..)

Thank you for understanding..

[Updated on: Sun, 09 December 2007 14:25]

Report message to a moderator

Re: port 3754 routing udp und tcp - geht nicht [message #24755 is a reply to message #24752] Sun, 09 December 2007 15:34 Go to previous messageGo to next message
kir is currently offline  kir
Messages: 1645
Registered: August 2005
Location: Moscow, Russia
Senior Member

can you also translate the subject? Smile

Kir Kolyshkin
http://static.openvz.org/userbars/openvz-developer.png
Re: port 3754 routing udp und tcp - geht nicht [message #24756 is a reply to message #24755] Sun, 09 December 2007 15:50 Go to previous messageGo to next message
Kutschka is currently offline  Kutschka
Messages: 24
Registered: February 2007
Junior Member
kir wrote on Sun, 09 December 2007 10:34

can you also translate the subject? Smile


Done.. And now comes the answer from you, or? Cool
Re: port 3754 routing udp und tcp - geht nicht [message #24895 is a reply to message #24756] Tue, 11 December 2007 18:59 Go to previous messageGo to next message
vaverin is currently offline  vaverin
Messages: 708
Registered: September 2005
Senior Member
vzctl set 1005 --iptables iptable_nat --save;

I suppose it is incorrect. --iptables option _restricts_ set of accessible iptable modules inside VE. Withis option all other tables can be disabled inside your VE.

I would recommend You to remove list of iptables modules from 1005.conf file. In this case all iptables modules loaded on HW node will be accessible inside VE.

Thank You,
Vasily Averin
Re: port 3754 routing udp & tcp - doesn't work [message #25107 is a reply to message #24749] Fri, 14 December 2007 14:24 Go to previous messageGo to next message
Sten is currently offline  Sten
Messages: 5
Registered: December 2007
Junior Member
I think the addresses are vice versa
(you want packages that are about to reach HN, ie. their destination is MY_PUBLIC_IP, to be redirected to VE), it should be:
iptables -t nat -A PREROUTING -p tcp -d MY_PUBLIC_IP --dport
 3784 -i eth0 -j DNAT --to-destination 192.168.1.8:3784


xor rsi,rsi
lodsb
Segmentation fault

E-mail returned to sender – Insufficient voltage

[Updated on: Fri, 14 December 2007 14:33]

Report message to a moderator

*SOLVED* Re: port 3754 routing udp & tcp - doesn't work [message #25116 is a reply to message #25107] Fri, 14 December 2007 17:35 Go to previous message
Kutschka is currently offline  Kutschka
Messages: 24
Registered: February 2007
Junior Member
Hello,
yes its solved..
Thank you..
Previous Topic: Per-VE VE_ROOT and VE_PRIVATE
Next Topic: All routable IP addresses all on the same vlan
Goto Forum:
  


Current Time: Sun Jun 30 22:27:28 GMT 2024

Total time taken to generate the page: 0.00452 seconds