Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Mar 1999 16:29:47 +0000 (GMT)
From:      Veaceslav Revutchi <sl@zeus.dnt.md>
To:        freebsd-questions@freebsd.org
Cc:        moldova-unix@moldsat.md
Subject:   ipnat problem (two ethernets)
Message-ID:  <Pine.BSF.4.05.9903191551500.74217-100000@zeus.dnt.md>

next in thread | raw e-mail | index | archive | help

Hi
I have a problem with ipnat on 3.1R and I hope someone can help me out.

I have a machine with two ethernets, which 
separates two LANs:
	
		LAN1    ||    LAN2 		   |195.138.124.50
		vx0  ---||--- ed0 -----------------|GATEWAY	  
	   10.0.0.1	||    195.138.124.34/27    |to INTERNET	
			    
and I would like to be able to allow machines with private IPs 10.0.0
on LAN1 to access internet directly. 

Here are my ipnat rules:

rdr vx0 10.0.0.1/32 port 25 -> 10.0.0.1 port 25
rdr vx0 10.0.0.1/32 port 110 -> 10.0.0.1 port 110
map vx0 10.0.0.0/24 -> 195.138.124.34/32 portmap tcp/udp 10000:40000
map vx0 10.0.0.0/24 -> 195.138.124.34/32

The first two rule will allow the LAN1 machines to access SMTP and POP3
on the nat machine and the other two should be mapping the 10.0.0
IPs into a internet routable IP.

The result is: 
The LAN1 machines can go as far as to ping the ed0's IP address
but go no further.

any advice is appreciated.

Veaceslav.
vr@dnt.md





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9903191551500.74217-100000>