Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Jul 2010 15:17:01 -0400
From:      alexus <alexus@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: ipnat.conf - map and rdr won't work!
Message-ID:  <AANLkTinh0CykJ1Av3f2THPDFOLS0YtYLDvRMHXm_wD3w@mail.gmail.com>
In-Reply-To: <AANLkTilVTo36Fzdh2DKAQhRjyDj8MNUuV9dhwvQ7Gf-V@mail.gmail.com>
References:  <AANLkTilVTo36Fzdh2DKAQhRjyDj8MNUuV9dhwvQ7Gf-V@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jul 14, 2010 at 10:32 PM, alexus <alexus@gmail.com> wrote:
> I can't put my mind around it, before reboot I was able to ssh in from
> outside to my jail and right now I can't!
> I even rebuild the whole system and even that didn't help:(
> anyone have any ideas?
>
> su-3.2# cat /etc/ipnat.rules
> map fxp0 lama -> 0/32
> rdr fxp0 64.52.58.58 port ssh -> lama port ssh tcp
> su-3.2# grep lama /etc/hosts
> 172.16.172.16 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 lama
> su-3.2# ipnat -l
> List of active MAP/Redirect filters:
> map fxp0 172.16.172.16/32 -> 0.0.0.0/32
> rdr fxp0 64.52.58.58/32 port 22 -> 172.16.172.16 port 22 tcp
>
> List of active sessions:
> su-3.2# ifconfig
> vr0: flags=3D8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric
> 0 mtu 1500
> =C2=A0 =C2=A0 =C2=A0 =C2=A0options=3D2808<VLAN_MTU,WOL_UCAST,WOL_MAGIC>
> =C2=A0 =C2=A0 =C2=A0 =C2=A0ether 00:19:5b:68:9b:01
> =C2=A0 =C2=A0 =C2=A0 =C2=A0inet 172.16.172.16 netmask 0xffffffff broadcas=
t 172.16.172.16
> =C2=A0 =C2=A0 =C2=A0 =C2=A0media: Ethernet autoselect (none)
> =C2=A0 =C2=A0 =C2=A0 =C2=A0status: no carrier
> fxp0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1=
500
> =C2=A0 =C2=A0 =C2=A0 =C2=A0options=3D2009<RXCSUM,VLAN_MTU,WOL_MAGIC>
> =C2=A0 =C2=A0 =C2=A0 =C2=A0ether 00:0f:fe:aa:f4:61
> =C2=A0 =C2=A0 =C2=A0 =C2=A0inet 64.52.58.58 netmask 0xffffffe0 broadcast =
64.52.58.63
> =C2=A0 =C2=A0 =C2=A0 =C2=A0media: Ethernet autoselect (100baseTX <full-du=
plex>)
> =C2=A0 =C2=A0 =C2=A0 =C2=A0status: active
> plip0: flags=3D108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> metric 0 =
mtu 1500
> lo0: flags=3D8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
> =C2=A0 =C2=A0 =C2=A0 =C2=A0inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
> =C2=A0 =C2=A0 =C2=A0 =C2=A0inet6 ::1 prefixlen 128
> =C2=A0 =C2=A0 =C2=A0 =C2=A0inet 127.0.0.1 netmask 0xff000000
> su-3.2# jls
> =C2=A0 JID =C2=A0IP Address =C2=A0 =C2=A0 =C2=A0Hostname =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Path
> =C2=A0 =C2=A0 1 =C2=A0172.16.172.16 =C2=A0 lama =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0/usr/jail=
/lama
> su-3.2# grep ^ipnat_enable /etc/rc.conf
> ipnat_enable=3D"YES"
> su-3.2# grep ^gateway_enable /etc/rc.conf
> gateway_enable=3D"YES"
> su-3.2# sysctl net.inet.ip.forwarding
> net.inet.ip.forwarding: 1
> su-3.2#
>
> and this is me from outside trying to ssh to my box and getting time out.=
..
>
> mp:~ alexus$ ssh -v jothost.com
> OpenSSH_5.2p1, OpenSSL 0.9.8l 5 Nov 2009
> debug1: Reading configuration data /etc/ssh_config
> debug1: Connecting to jothost.com [64.52.58.58] port 22.
> debug1: connect to address 64.52.58.58 port 22: Operation timed out
> ssh: connect to host jothost.com port 22: Operation timed out
> mp:~ alexus$
>
>
> --
> http://alexus.org/
>

anyone?

--=20
http://alexus.org/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTinh0CykJ1Av3f2THPDFOLS0YtYLDvRMHXm_wD3w>