Quite several posts found on the internet require to insert ftp conntrack module of netfilter. Check if output of command sudo cat /proc/sys/net/ipv4/ip_forward In addition our forwarding rules require IPv4 forwarding to be enabled basically. Policy may be adjusted using sudo iptables -t filter -P FORWARD ACCEPT Checking IPv4 Forwarding If your policy is different don't change it without inspecting reasons for having different policy first. The output must be Chain FORWARD (policy ACCEPT) You may check your case by invoking sudo iptables -t filter -L | grep "Chain FORWARD" These two rules presume to have an accepting policy on chain FORWARD in table filter of iptables.
Iptables -t nat -A PREROUTING -i eth0 -p tcp -dport 10000:49999 -j DNAT -to 10.0.3.1 Checking Forward Policy iptables -t nat -A PREROUTING -i eth0 -p tcp -dport 21 -j DNAT -to 10.0.3.1 On physical host some rules of net filter must be set for properly forwarding incoming traffic to virtual machine.
0 kommentar(er)
