Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have two Dell Poweredge R210 servers, both running Ubuntu 10 Server x64.

Server A has a Dell iDRAC6 Enterprise ILO card (on, and both the server and the DRAC use Server B as a gateway (with server B's WAN IP being Server B uses the following NAT rules in IPTables to route traffic through to Server A's DRAC:


--append PREROUTING --in-interface eth1 --protocol tcp --destination --destination-port 8019 --jump DNAT --to-destination

--append POSTROUTING --out-interface eth1 --jump SNAT --to-source

This works fine for accessing Server A's iDRAC via Server B, apart from the Java virtual console. This fails with the following error: Unable to load resource:
at Source)


I know that the Java console uses port 5900, and possibly ports 83 and 5891.

Can anyone help me in getting this working?

share|improve this question
possible answer:… – mbrownnyc Nov 25 '11 at 16:53
Which kind of DRAC is this? DRAC5? iDRAC6 (Enterprise)? They behave quite different when it comes down to the java console. – Nils Nov 25 '11 at 21:48
iDRAC6 Enterprise. I've amended the original question to reflect this. – jetboy Nov 26 '11 at 9:45
up vote 0 down vote accepted

The trick is not to change the port in iptables' NAT configuration, but to change it on the DRAC. Changing the DRAC port to 8019 and changing the iptables rule to:

--append PREROUTING --in-interface eth1 --protocol tcp --destination --destination-port 8019 --jump DNAT --to-destination

gets things going a little further before failure. Adding:

--append PREROUTING --in-interface eth1 --protocol tcp --destination --destination-port 5900 --jump DNAT --to-destination

gets the console and remote media functionality working 100%. As the DRAC also offers the functionality to change port 5900, I'd imagine it'd be safe to move this to a different port.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.