problem redirecting with ipnat

David Banning david+dated+1239125679.d14616 at skytracker.ca
Thu Apr 2 10:47:35 PDT 2009


I am attempting to route local and external traffic to a second machine
on port 85 to apache. 

The redirection works for external traffic coming in but I cannot seem
to redirect local traffic to the secondary machine.

Here are my ipnat rules;

rdr fxp0 0/0 port 85 -> 192.168.1.10 port 85
rdr tun0 0/0 port 85 -> 192.168.1.10 port 85
rdr dc0 0/0 port 80 -> 192.168.1.1 port 8180

where 192.168.1.1 is the local machine and 192.168.1.10 is the 
secondary machine

the third ipnat entry simply redirects all outgoing browser traffic to 
squid/dansguardian

Here is my ifconfig;

[root at 3s1 /etc]# ifconfig
fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=8<VLAN_MTU>
        inet 209.161.205.12 netmask 0xffffff00 broadcast 209.161.205.255
        ether 00:0d:60:09:fc:6e
        media: Ethernet autoselect (10baseT/UTP)
        status: active
dc0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=8<VLAN_MTU>
        inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
        ether 00:20:78:0e:13:d6
        media: Ethernet autoselect (10baseT/UTP)
        status: active
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 
        inet6 ::1 prefixlen 128 
        inet 127.0.0.1 netmask 0xff000000 
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1492
        inet 209.161.205.12 --> 207.136.64.7 netmask 0xffffffff 
        Opened by PID 356
[root at 3s1 /etc]#

Externally, simply http://3s1.com:85

works but will not work locally - wondering if anyone could provide direction
here.


More information about the freebsd-questions mailing list