[cobalt-developers] Firewall and ipchains

["Rainer Wieland" <rwieland@xxxxxxxxxxxxx>]

Hi there,

I'm trying to understand how IP filtering is working on QUBE3. I tried,
using the browser based form to configure an IP packet forward from
ETH1 to a terminal server connected through our private LAN to ETH0 but
there is no way to make it running.

I will try to pratically explain my problem:
1) I have my QUBE3 with ETH1 set to a public IP a.b.c.d and ETH0
set to private IP 192.168.16.254.
2) IP class 192.168.0.x has been applied to all ours PC and servers
using our company LAN.

What I need to do now is to manage all packets addressed to this
terminal
server, from outside our LAN, via QUBE2.

Pratically I need to create a forwarding rules that make QUBE3 behaving
as follow:
- accept packets from any hosts on port 3389 of QUBE3 and forward them
to
192.168.16.1 port 3389;

Any help or suggestions would be great.

Thanks