1

I am new to VPN and Traffic rerouting. I already read this thread: Port forward to VPN Client? But I didn't get it working :/ That is why I am asking again.

So here is my problem: I have a server (Raspberry Pi) behind a vodafone router which does not allow direct connections from WAN to the server. Therefore I created a VPN connections between the RPi to an openSVN server. It looks like this:

-----------------------       ---------------------------------------
| Pi                  |       | openVPN Server                       |
| (VPN IP: 172.X.X.2) | <---> | (VPN IP: 127.X.X.1; WAN IP: Y.Y.Y.Y) |
-----------------------       ----------------------------------------

the VPN connection works. If I call

wget 172.X.X.2:8080

from the openVPN Server, it works and the result is the expected website.

So what I want is: If I call Y.Y.Y.Y:54321 from WAN it should be forwarded to 172.X.X.2:8080 to allow the access from outside on the RPi.

Is this possible? I already enabled port forwarding and tried to following:

# sysctl -w net.ipv4.ip_forward=1
# iptables -t nat -A PREROUTING -d Y.Y.Y.Y -p tcp --dport 8080 -j DNAT --to-dest 172.X.X.2:8080
# iptables -t nat -A POSTROUTING -d 172.X.X.2 -p tcp --dport 8080 -j SNAT --to-source 127.X.X.1

Can you please tell me where my mistake is or how it should be working? :)

Thomas Dickey
  • 76,765
chf
  • 11

0 Answers0