Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 03 Mar 2001 10:00:56 -0600
From:      Jason Hunt <jhunt@akula.org>
To:        freebsd-questions@freebsd.org
Subject:   redirection of ports..
Message-ID:  <3AA11538.4C43C765@akula.org>

next in thread | raw e-mail | index | archive | help
greetings,

My firewall is directing traffic on ports 80 and 25 to
a non routable ip behind the firewall.  Everything seems
great with sendmail.  The problems are with apache.  My
nat rules are as follows:

map xl0 192.168.x.x/24 -> xl0/32 portmap tcp/udp 10000:20000
map xl0 192.168.x.x/24 -> xl0/32
rdr xl0 xl0/32 port 25 -> 192.168.x.x port 25
rdr xl0 xl0/32 port 80 -> 192.168.x.x port 80


Well actually there are a couple of problems.  From a
machine behind the firewall if I try and connect
to the firewall on port 25 for example, I get a 
connection refused.  If I do it from another machine
on the inernet, everything works right.  With clients
behind the firewall same thing with apache - connection
refused.

Also I was using virtual hosts with apache before and
for some reason I am getting a test page now - though
nothing has changed.  I think this may be due to the
fact that my NameVirtualHost is my IP provided by
ISP and since clients behind the firewall are not
be redirected to the right machine it is displaying
this test page for some reason - confused about this.

Anyway, I tried adding something like this to the 
nat rules:

rdr xl1 xl1/32 port 80 -> 192.168.x.x port 80 

xl1 is the second nic in my machine, while xl0
is dhcp from isp.  This didn't work though.

can anyone explain where I am screwing up? Thanks

-- 
There is not the slightest indication that nuclear energy
will ever be obtainable.  It would mean that the atom would
have to be shattered at will.
                                   - Albert Einstein, 1932.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3AA11538.4C43C765>