Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 15 Nov 1999 18:31:18 -0500
From:      "Christian Williams" <chris@pagan.tzo.com>
To:        <freebsd-questions@freebsd.org>
Subject:   natd, ipfw, & some general questions
Message-ID:  <NDBBKFEMELIAIIIMJNECKEONCBAA.chris@pagan.tzo.com>

next in thread | raw e-mail | index | archive | help
Hello all,
	After scouring the web to get these issues straightened out, I need your
help.
	I have configured a FreeBSD 3.3 machine as my gateway machine for 3 other
machines behind.  I have read both the natd and ipfw man pages and done
everything necessary to set it up.  Unfortunately, not everything that is
supposed to work, is.  Internet access works beautifully from inside.  It's
coming back in that's the issue.

/etc/rc.conf contains:
--begin rc.conf---
(among other things)
gateway_enable="YES"
firewall_enable="YES"
firewall_type="open"
natd_enable="YES"
--end rc.conf--

natd is called from a natd.startup script which contains:
--begin natd.startup--
ifconfig tx0 <outside IP> netmask 255.255.255.192 (gotta love @home)

route add default <default gateway>

ifconfig de0 10.0.0.4 netmask 255.0.0.0

syctl -w net.inet.ip.forwarding=1

natd -f /etc/natd.conf
---end natd.startup-----

natd.conf contains:
--begin natd.conf--
interface tx0
same_ports yes
use_sockets yes
dynamic yes (do I need this if my IPs are static?)
redirect_port tcp 10.0.0.6:8383 8383
redirect_port udp 10.0.0.6:8383 8383
redirect_port tcp 10.0.0.6:80 80
redirect_port udp 10.0.0.6:80 80
redirect_port tcp 10.0.0.6:110 110
redirect_port udp 10.0.0.6:110 100
redirect_port tcp 10.0.0.6:143 143
redirect_port udp 10.0.0.6:143 143
redirect_port tcp 10.0.0.6:25 25
redirect_port udp 10.0.0.6:25 25
---end natd.conf----

I can get to the web server(s) and obviously email is working, but I cannot
get the 8383(webmail), pop3, or IMAP services to redirect.  I'm also curious
how I can test these services from an inside machine (10.0.0.2).  I'm only
able to hit the web servers from a machine outside the firewall.  Please
help.  I have a business that depends on this.  Thanks!


Christian Williams
010101010101010101010101
Man In A Box Productions
chris@pagan.tzo.com
http://pagan.tzo.com



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?NDBBKFEMELIAIIIMJNECKEONCBAA.chris>