problem redirecting with ipnat

[Roger Olofsson]

David Banning skrev:
> I am attempting to route local and external traffic to a second machine
> on port 85 to apache. 
> 
> The redirection works for external traffic coming in but I cannot seem
> to redirect local traffic to the secondary machine.
> 
> Here are my ipnat rules;
> 
> rdr fxp0 0/0 port 85 -> 192.168.1.10 port 85
> rdr tun0 0/0 port 85 -> 192.168.1.10 port 85
> rdr dc0 0/0 port 80 -> 192.168.1.1 port 8180
> 
> where 192.168.1.1 is the local machine and 192.168.1.10 is the 
> secondary machine
> 
> the third ipnat entry simply redirects all outgoing browser traffic to 
> squid/dansguardian
> 
> Here is my ifconfig;
> 
> [root at 3s1 /etc]# ifconfig
> fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         options=8<VLAN_MTU>
>         inet 209.161.205.12 netmask 0xffffff00 broadcast 209.161.205.255
>         ether 00:0d:60:09:fc:6e
>         media: Ethernet autoselect (10baseT/UTP)
>         status: active
> dc0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         options=8<VLAN_MTU>
>         inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
>         ether 00:20:78:0e:13:d6
>         media: Ethernet autoselect (10baseT/UTP)
>         status: active
> plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
>         inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 
>         inet6 ::1 prefixlen 128 
>         inet 127.0.0.1 netmask 0xff000000 
> tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1492
>         inet 209.161.205.12 --> 207.136.64.7 netmask 0xffffffff 
>         Opened by PID 356
> [root at 3s1 /etc]#
> 
> Externally, simply http://3s1.com:85
> 
> works but will not work locally - wondering if anyone could provide direction
> here.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
> 


Hello David,

It looks like you are trying to port forward using a NAT tool(?) May I 
suggest that you use a port forward tool instead? Try portfwd-0.29 from 
ports.

/R