Port Knocking And DNAT Rules

Home » CentOS » Port Knocking And DNAT Rules
CentOS No Comments

So I found an excellent port knocking tutorial using ONLY iptables rules that looks to be among the best I’ve ever seen. (warning: techno music, tough to read screen, you don’t need to type it in because I post a link to script below)

http://www.youtube.com/watch?v=0zFQocf7C_0

It works fabulously for simply opening a port to a locally managed service, but I can’t seem to get it to work for a PREROUTING/DNAT rule. I’ve posted the shell script I’m trying to get to work, it should be self-documented.

http://chico.benjamindsmith.com/iptables.txt

I’ve confirmed that the logs correctly show port knocking 2, 3, and 4 in
/var/log/messages so everything seems to be working golden all the way up to the last line. There are no errors reported when I run this script. The result that I get is that it acts as though packets are being dropped for 15 seconds, then I get connection refused.

What am I doing wrong?

LEAVE A COMMENT