From owner-freebsd-questions  Mon Mar 11  9:45:34 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from shark.flips.net (shark.flips.net [208.214.176.71])
	by hub.freebsd.org (Postfix) with ESMTP id A91AB37B402
	for <freebsd-questions@FreeBSD.ORG>; Mon, 11 Mar 2002 09:45:23 -0800 (PST)
Received: from sf_pdc.bellsouth.net (SF_PDC.flips.net [65.82.186.254])
          by shark.flips.net (Post.Office MTA v3.5.3 release 223
          ID# 0-60222U2500L250S0V35) with ESMTP id net
          for <freebsd-questions@FreeBSD.ORG>;
          Mon, 11 Mar 2002 12:45:36 -0500
Received: by sf_pdc with Internet Mail Service (5.5.2448.0)
	id <GLRG11M1>; Mon, 11 Mar 2002 12:43:09 -0500
Message-ID: <B9FB8C769C17D411892D00B0D02165320F1378@sf_pdc>
From: bob@sfcei.com
To: freebsd-questions@FreeBSD.ORG
Subject: natd not working
Date: Mon, 11 Mar 2002 12:43:08 -0500
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2448.0)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I am trying to get natd to port redirect an external requests to port 80
to an intenal machine(192.168.70.15) also port 80. However it is not
working. Can somebody help me as to why this is not working?

I am running natd from 
/sbin/natd -f /etc/natd.conf:

# natd config
interface fxp0
redirect_port tcp 192.168.70.15:80 80
redirect_port tcp 192.168.70.12:1723 1723
log             yes
use_sockets     yes
same_ports      yes

The port redirection is not working. If I ssh into the system and then
use lynx to view the 192.168.70.15 machine, it works. When I try using a
web browser to the external IP, it does not forward/redirect. 

Some of my ipfw rules are as follows:

# Outside interface network and netmask and ip
oif="fxp0"
onet="216.227.86.0"
omask="255.255.255.252"
oip="216.227.86.197"

# Inside interface network and netmask and ip
iif="sis0"
inet="192.168.70.0"
imask="255.255.255.0"
iip="192.168.70.13"

# Network Address Translation.
${fwcmd} add divert natd all from any to any via ${oif}
${fwcmd} add pass tcp from any 1723 to any setup

# HTTP - Allow access to the web server
${fwcmd} add pass tcp from any to any 80 setup

Interestingly, my sendmail works, although this is on the FBSD machine.
The 192.168.70.15 machine is a Sun box running Solaris and Apache.

My /etc/rc.conf includes:

sendmail_enable="YES"
sendmail_flags="-bd -q15m"
sshd_enable="YES"
ifconfig_fxp0="DHCP"
ifconfig_sis0="inet 192.168.70.13"
gateway_enable="YES"
defaultrouter="216.227.86.197"
firewall_enable="YES"
firewall_type="simple"
firewall_script="/etc/rc.ipfw"
natd_enable="YES"
natd_interface="fxp0"
natd_flags="-f /etc/natd.conf"
natd_flags="-redirect_port tcp 192.168.70.15:80 80"
portmap_enable="YES"
enable_rfc1323="YES"
tcp_extensions="YES"

Please reply to this address, as I cannot join the list at my office
email. Thanks. bob@sfcei.com

Thanks
Bob

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message