如何通过IPtables访问虚拟机中的Seafile服务器？

Question

I have installed Seafile-server 3.0.4 64bit on a Ubuntu-server 14.04 with default ports settings ( ie 8000 , 8082 , 10001 , 12001 ) but fail to access the instance with the client.

Infrastructure

The Ubuntu-server is running as a KVM machine on a Gentoo host.

Iptables rules

After some time I add the following Iptables rules to the host machine ( gentoo ), that seems to match the Seafile 's requirements:

#Iptables-Rules for Seafile
iptables -A INPUT -p tcp -m multiport --dports 8000,8082,10001,12001 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A output -p tcp -m multiport --sports 8000,8082,10001,12001 -m state --state ESTABLISHED -j ACCEPT

However I'm still unable to connect even with telnet to the seafile-server either from Internet or the host machine.

Update: issue might be related to fail2ban

Answer 1

As I'm using NAT to link my virtual machine to my host, I had to edit the rules as follow to get it to work:

#Iptables-Rules for Seafile
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 10001 -j DNAT --to 192.168.8.8:10001
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 12001 -j DNAT --to 192.168.8.8:12001

References

• Linux Firewall Tutorial: IPTables Tables, Chains, Rules Fundamentals