MASQUERADE just ONE port: 80

[TheN00BeXpert]

Hello,

I am currently MASQUERADING with this command:

iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE

How can I change this command that that PC who is MASQUERADED to be able to use ONLY HTTP protocol? I would like to deny Yahoo Messenger, DC++ and other applications.

Thank you in advance for your time.

[marcelkraan]

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 3389 -j DNAT --to-dest 192.168.0.104

i did that with windows remote desktop reroute the 3389 port

but it's not exactly what you want

[TheN00BeXpert]

192.168.0.104 beeing the PC who recives internet with DNAT?

[marcelkraan]

Yes that is correct..

works only from the outside
you can't test it inside

Originally Posted by TheN00BeXpert

192.168.0.104 beeing the PC who recives internet with DNAT?

[TheN00BeXpert]

Yea, that's the definition of the DESTINATION NAT.

So, any ideas for my problem?