Date: Thu, 29 Dec 2005 15:08:25 -0800 From: "Chris S. Wilson" <cswilson@ordizmelby.com> To: "Greg Barniskis" <nalists@scls.lib.wi.us> Cc: freebsd-questions <freebsd-questions@freebsd.org> Subject: RE: NATD Internal Network problems Message-ID: <C8DFE22B48199443918D30E52F1AD2CC3FED7B@omaserver.oma.local>
next in thread | raw e-mail | index | archive | help
Weird, every other router I've used forwards all the packets properly, even my backup linksys when I hook it up. Really I don't want to do the split dns stuff, sadly I will have to move away from FreeBSD for performing this operation I guess. Thanks for the help! CW.=20 -----Original Message----- From: Greg Barniskis [mailto:nalists@scls.lib.wi.us]=20 Sent: Thursday, December 29, 2005 3:05 PM To: Chris S. Wilson Cc: freebsd-questions Subject: Re: NATD Internal Network problems Chris S. Wilson wrote: > Hello! :) >=20 > I am having a problem with freebsd 5.3-release and natd. >=20 > When I try to connect to a service on my internal network to an IP on=20 > my external network that has a port redirected, it wont connect. >=20 > IE: 67.128.100.2 is my external IP, on my internal network I try to=20 > connect to 67.128.101.2:80 which is forwarded in my natd.conf and the=20 > connection is refused. >=20 > Does anyone know why? I don't know the exact technical reasons "why" but I will confirm for you that this simply does not work, and the reasons why center around it being a rather tortured mess. Your inside machines should reach your inside server by its inside address. Think about how you're sending your request outside the firewall (getting the request NATed on the way out) and then back in (getting the request re-NATed), and then having the reply packets from the web server have to take the reverse of that path. Yuck. Use split DNS so that that "www.example.com" appears to external clients as being your external NAT server address, and appears to inside clients as the web server's real inside address. -- Greg Barniskis, Computer Systems Integrator South Central Library System (SCLS) Library Interchange Network (LINK) <gregb at scls.lib.wi.us>, (608) 266-6348
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?C8DFE22B48199443918D30E52F1AD2CC3FED7B>