Port 80 closed?

Damien Fleuriot ml at my.gd
Wed Mar 9 10:14:36 UTC 2011


On 3/8/11 11:52 PM, Dave Johnson wrote:
> Hi all
> 
> 
> An IPFW problem?
> 
> An help gladly accepted
> 
> It would appear Port 80 closed
> 
> Ports 21 25 443 587 998 work well
> 
> 
> rc.conf
> defaultrouter="192.168.0.1"
> gateway_enable="YES"
> hostname="xxx.xxx.xxx"
> ifconfig_re0="inet 192.168.0.11 netmask 255.255.255.0"
> ifconfig_re1="inet 192.168.1.2 netmask 255.255.255.0"
> keymap="us.iso"
> moused_enable="YES"
> sshd_enable="YES"
> firewall_enable="YES"
> firewall_script="/etc/rc.firewall"
> natd_program="/sbin/natd"
> natd_enable="YES"
> natd_interface="re0"
> natd_flags="-f /etc/natd.conf"
> dhcpd_enable="NO"
> dhcpd_flags="-q"
> dhcpd_conf="/usr/local/etc/dhcpd.conf"
> dhcpd_ifaces="re1"
> dhcpd_withumask="022"
> 
> natd.conf
> 
> interface re0
> use_sockets yes
> same_ports yes
> log
> #redirect_port tcp 192.168.1.189:3389 3389
> #redirect_port tcp 192.168.1.53:5500 5500
> 
> #!/bin/sh
> 
> /sbin/ipfw -f flush
> /sbin/ipfw -f pipe flush
> 
> 
> 
> #Nat Rules
> /sbin/ipfw add 10 allow ip from 127.0.0.1 to 127.0.0.1 via lo0
> /sbin/ipfw add 30 divert natd all from any to any via re0
> 
> 
> #Forward to Transparent Proxy Server
> #/sbin/ipfw add 10001 fwd 127.0.0.1,3128 tcp from any to any 80
> #/sbin/ipfw add 10010 fwd 127.0.0.1,3128 tcp from 10.0.21.2 to any 80
> 
> /sbin/ipfw add 10001 fwd 127.0.0.1,3128 tcp from any to any 80
> 
> 
> /sbin/ipfw add 50000 allow ip from any to any
> 
> 
> Regards
> _______________________________________________
> freebsd-stable at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe at freebsd.org"



Hi Dave,


First of all, I'd suggest you explain what you're trying to do.

>From your IPFW conf I can only guess you're trying to set up a
transparent proxy.


How do you test to see if the port is open or not ?

Is your squid instance running and configured for transparent forwarding
with IPFW ?


More information about the freebsd-stable mailing list