problem redirecting with ipnat

David Banning david+dated+1239138965.beb0ff at skytracker.ca
Thu Apr 2 14:47:38 PDT 2009


Thank Roger - I am not sure what the difference is between those two.
You solutions worked. Thanks -
>
>
> David Banning skrev:
>> I am attempting to route local and external traffic to a second machine
>> on port 85 to apache.
>> The redirection works for external traffic coming in but I cannot seem
>> to redirect local traffic to the secondary machine.
>>
>> Here are my ipnat rules;
>>
>> rdr fxp0 0/0 port 85 -> 192.168.1.10 port 85
>> rdr tun0 0/0 port 85 -> 192.168.1.10 port 85
>> rdr dc0 0/0 port 80 -> 192.168.1.1 port 8180
>>
>> where 192.168.1.1 is the local machine and 192.168.1.10 is the 
>> secondary machine
>>
>> the third ipnat entry simply redirects all outgoing browser traffic 
>> to squid/dansguardian
>>
>> Here is my ifconfig;
>>
>> [root at 3s1 /etc]# ifconfig
>> fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>>         options=8<VLAN_MTU>
>>         inet 209.161.205.12 netmask 0xffffff00 broadcast 209.161.205.255
>>         ether 00:0d:60:09:fc:6e
>>         media: Ethernet autoselect (10baseT/UTP)
>>         status: active
>> dc0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>>         options=8<VLAN_MTU>
>>         inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
>>         ether 00:20:78:0e:13:d6
>>         media: Ethernet autoselect (10baseT/UTP)
>>         status: active
>> plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
>> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
>>         inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4         inet6 ::1 
>> prefixlen 128         inet 127.0.0.1 netmask 0xff000000 tun0: 
>> flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1492
>>         inet 209.161.205.12 --> 207.136.64.7 netmask 0xffffffff 
>>         Opened by PID 356
>> [root at 3s1 /etc]#
>>
>> Externally, simply http://3s1.com:85
>>
>> works but will not work locally - wondering if anyone could provide 
>> direction
>> here.
>> _______________________________________________
>> freebsd-questions at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to 
>> "freebsd-questions-unsubscribe at freebsd.org"
>>
>
>
> Hello David,
>
> It looks like you are trying to port forward using a NAT tool(?) May I 
> suggest that you use a port forward tool instead? Try portfwd-0.29 
> from ports.
>
> /R
>


More information about the freebsd-questions mailing list