From owner-freebsd-questions Tue May 28 12: 6:50 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mta3.rcsntx.swbell.net (mta3.rcsntx.swbell.net [151.164.30.27]) by hub.freebsd.org (Postfix) with ESMTP id B61BA37B405 for ; Tue, 28 May 2002 12:06:43 -0700 (PDT) Received: from swbell.net ([64.219.93.187]) by mta3.rcsntx.swbell.net (Sun Internet Mail Server sims.3.5.2000.03.23.18.03.p10) with ESMTP id <0GWU00MBJ52RKQ@mta3.rcsntx.swbell.net> for freebsd-questions@freebsd.org; Tue, 28 May 2002 14:06:28 -0500 (CDT) Date: Tue, 28 May 2002 14:07:04 -0500 From: Curtis Polk Subject: IPNAT Multiple rdr To: freebsd-questions@freebsd.org Message-id: <3CF3D558.85886D80@swbell.net> MIME-version: 1.0 X-Mailer: Mozilla 4.78 [en] (WinNT; U) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7bit X-Accept-Language: en Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I have two aliases on my outward facing machine. I would like to redirect the primary address and the two aliases to an internal machine running two instances of Apache and one of Tomcat. I have tried various ipnat rules, and nothing works. As near as I can tell from the documentation, this should work, but does not: # redirects to internal server rdr xl0 aaa.bbb.ccc dd1 port 80 -> 192.168.2.3 port 80 rdr xl0 aaa.bbb.ccc.dd2 port 80 -> 192.168.2.4 port 80 rdr xl0 aaa.bbb.ccc.dd3 port 3000 -> 192.168.2.5 port 3000 # normal private-to-public mapping map xl0 192.168.2.0/24 -> aaa.bbb.ccc.dd1/32 The firewall macine has two network cards, xl0, the public interface, and xl1, the 192 network. I have tried coming down to the simplest configuration, by attempting to redirect the firewall's primary address to 192.168.2.3, the internal machine's primary address. The redirects don't work, but the map does. Any help would be appreciated. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message