alfresco and iptables

Craig White craigwhite at azapple.com
Sun Dec 9 03:49:10 UTC 2007


Well, it's really an iptables question.

alfresco runs on tomcat which runs as an unprivileged user which makes
it difficult to use as a CIFS server (massive understatement)

so what I want to do is to redirect packets from unprivileged ports to
the normal SMB ports...here is my iptables script (but it's not working
as intended)

#!/bin/sh
#
echo 1 > /proc/sys/net/ipv4/ip_forward
modprobe iptable_nat
iptables -F
iptables -t nat -F
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
iptables -t nat -A PREROUTING -p tcp -d 192.168.3.8 --dport 445 -j
REDIRECT \
--to-ports 1445
iptables -t nat -A PREROUTING -p tcp -d 192.168.3.8 --dport 139 -j
REDIRECT \
--to-ports 1139
iptables -t nat -A PREROUTING -p udp -d 192.168.3.8 --dport 137 -j
REDIRECT \
--to-ports 1137
iptables -t nat -A PREROUTING -p udp -d 192.168.3.8 --dport 138 -j
REDIRECT \
--to-ports 1138
iptables -t nat -A PREROUTING -p tcp -s 192.168.3.8 --dport 1445 -j
REDIRECT \
--to-ports 445
iptables -t nat -A PREROUTING -p tcp -s 192.168.3.8 --dport 1139 -j
REDIRECT \
--to-ports 139
iptables -t nat -A PREROUTING -p udp -s 192.168.3.8 --dport 1137 -j
REDIRECT \
--to-ports 137
iptables -t nat -A PREROUTING -p udp -s 192.168.3.8 --dport 1138 -j
REDIRECT \
--to-ports 138

suggestions?

Craig




More information about the users mailing list