PLEASE HEEEEEELLLLPPPP ME...
    zel at free.fr 
    zel at free.fr
       
    Wed Jul 23 04:51:45 PDT 2003
    
    
  
please HELP !!!
Ok... here is my problem that I tried to explain completly !
The situation is the one below:
=====================================
|SpeedToucheHome Ethernet ADSL Modem|
|    10.0.0.138/24                  |
=====================================
            |
       10.0.0.0/24 
            |
==========================
|   10.0.0.1/24           |
|      (A)  10.1.0.254/24 |- 10.1.0.0/24 -  (... DMZ ...)
| 192.168.1.254/24        |
==========================
           |
      192.168.1.0/24
           |
          ...
     clients workstations
My problem is about the computer A which does not what I would like It does.
Currently, this computer has a customized kernel with thoses options:
IPFIREWALL
IPDIVERT
but not IPFILTER !!! maybe it is the problem, I don't know !
in the rc.conf, I made the following configuration
firewall_enabled="YES"
firewall_type="SIMPLE"  (but I tried too with OPEN")
natd_enable="YES"
natd_interface="tun0"   (this is the interface for PPPoE, I think)
natd_flags="-f /etc/natd.conf"
...
and in natd.conf:
dynamic
interface tun0
redirect_port tcp 10.1.0.1:20-21 20-21
10.1.0.1 is the IP address from my FTP server which is a computer placed in the 
DMZ.
My problem is: "from outside, I cannot access to the FTP server..."
What I can say is:
First: My FTP server is OK because from inside, I can access to it from any 
computer in DMZ or from clients workstations.
Secund: The answer to an outside request is "connection closed by host".
Third: Interface tun0 (the virtual interface for PPPoE) receives the ftp 
request but does not forward them to ed1 (the outside netcard from A and 
configured with 10.0.0.1). (I discoverd that with tcpdump).
  (the others interfaces get no more ftp packets from tun0)...
So, what can I do to solve this problem...
Thank you
Sylvain.
    
    
More information about the freebsd-net
mailing list