Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 29 Mar 2006 09:54:21 +0200
From:      Erik Norgaard <norgaard@locolomo.org>
To:        fbsd_user@a1poweruser.com
Cc:        "freebsd-questions@FreeBSD. ORG" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: FBSD 6.0 ipfilter nat redirect not working.
Message-ID:  <442A3D2D.4080701@locolomo.org>
In-Reply-To: <MIEPLLIBMLEEABPDBIEGCEHCHDAA.fbsd_user@a1poweruser.com>
References:  <MIEPLLIBMLEEABPDBIEGCEHCHDAA.fbsd_user@a1poweruser.com>

next in thread | previous in thread | raw e-mail | index | archive | help
fbsd_user wrote:

> # /root >ipnat -l
> List of active MAP/Redirect filters:
> map rl0 10.0.10.0/29 -> 0.0.0.0/32 proxy port ftp ftp/tcp
> map rl0 0.0.0.0/0 -> 0.0.0.0/32 proxy port ftp ftp/tcp
> map rl0 10.0.10.0/29 -> 0.0.0.0/32
> rdr rl0 0.0.0.0/0 port 6188 -> 10.0.10.4 port 80 tcp
> 
> List of active sessions:
> RDR 10.0.10.4       80    <- -> 79.69.59.49     6188  [65.45.227.95
> 2698]
> MAP 10.0.10.6       1857  <- -> 79.69.59.49     1857
> [216.155.193.144 5050]
> 
> Nothing happens. No ipf.log records on gateway box and
> no ipf.log records on the LAN web server box.
> There is firewall rule to log & pass from any to 10.0.10.4 port = 80
> keep state
> And any packet that does not match a firewall rule get logged and
> dropped.

Please post your filter ruleset also.

Erik
-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?442A3D2D.4080701>