From owner-freebsd-questions  Tue Aug 21  8:49:37 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from cody.jharris.com (cody.jharris.com [205.238.128.83])
	by hub.freebsd.org (Postfix) with ESMTP id 2857537B405
	for <freebsd-questions@FreeBSD.ORG>; Tue, 21 Aug 2001 08:49:31 -0700 (PDT)
	(envelope-from nick@rogness.net)
Received: from localhost (nick@localhost)
	by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f7LFnNc98056;
	Tue, 21 Aug 2001 10:49:28 -0500 (CDT)
	(envelope-from nick@rogness.net)
Date: Tue, 21 Aug 2001 10:49:23 -0500 (CDT)
From: Nick Rogness <nick@rogness.net>
X-Sender: nick@cody.jharris.com
To: Chris Hastie <lists@oak-wood.co.uk>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Port redirection with natd
In-Reply-To: <BW7Dh6EBqig7Ew0j@chris.oak-wood.co.uk>
Message-ID: <Pine.BSF.4.21.0108211032390.97444-100000@cody.jharris.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Tue, 21 Aug 2001, Chris Hastie wrote:

> On Mon, 20 Aug 2001, Nick Rogness <nick@rogness.net> wrote
> >On Mon, 20 Aug 2001, Chris Hastie wrote:
> >
> >
> >       2) /var/log/alias.log
> >
> 
> Thanks. I'm none the wiser for looking at a log I'm afraid. A lot of
> similar lines like this
> 
> | icmp=0, udp=1, tcp=3, pptp=0, proto=0, frag_id=0 frag_ptr=0 / tot=4
> (sock=0)


	Attach the log file and send it to me (not the list).

> 
> which make little sense  to me :(
> 
> >       What does `ipfw -a l` report?
> 
> | rowan# ipfw -a l
> | 00050 161  17814 divert 8668 ip from any to any via xl0
> | 00100 164  18720 allow ip from any to any via lo0
> | 00200   0      0 deny ip from any to 127.0.0.0/8
> | 00300   0      0 deny ip from 127.0.0.0/8 to any
> | 65000 988 491392 allow ip from any to any
> | 65535   3    984 deny ip from any to any

	Add the following:

	# ipfw add 60 allow log ip from any to 192.168.37.3

	Then attempt your login to port 25 from the outside world.  It
	should log it to /var/log/security.  Send that file also to me.

> 
> >Is celandine reachable from your
> >       natd machine and is the port listening on that machine?
> 
> Yes and yes:
> 
> | rowan# telnet celandine 25
> | Trying 192.168.37.3...
> | Connected to celandine.oak-wood.co.uk.
> | Escape character is '^]'.
> | 220 mail.oak-wood.co.uk Ready for action (Mailtraq 1.1.6.1176/SMTP)


	Is celandine's default gateway rowan?  

Nick Rogness <nick@rogness.net>
 - Keep on Routing in a Free World...
  "FreeBSD: The Power to Serve!"


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message