From owner-freebsd-questions@FreeBSD.ORG Thu Apr 2 17:47:34 2009 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B2C74106566B for ; Thu, 2 Apr 2009 17:47:34 +0000 (UTC) (envelope-from david+dated+1239125679.d14616@skytracker.ca) Received: from 3s1.com (3s1.com [209.161.205.12]) by mx1.freebsd.org (Postfix) with ESMTP id 190CA8FC19 for ; Thu, 2 Apr 2009 17:47:33 +0000 (UTC) (envelope-from david+dated+1239125679.d14616@skytracker.ca) Received: from 3s1.com (localhost [127.0.0.1]) by 3s1.com (8.13.8/8.13.8) with ESMTP id n32HYiBQ026052 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 2 Apr 2009 13:34:48 -0400 (EDT) (envelope-from david+dated+1239125679.d14616@skytracker.ca) Received: (from david@localhost) by 3s1.com (8.13.8/8.14.1/Submit) id n32HYf90026051 for questions@freebsd.org; Thu, 2 Apr 2009 13:34:41 -0400 (EDT) (envelope-from david+dated+1239125679.d14616@skytracker.ca) X-Authentication-Warning: 3s1.com: david set sender to david+dated+1239125679.d14616@skytracker.ca using -f Received: by 3s1.com (tmda-sendmail, from uid 1000); Thu, 02 Apr 2009 13:34:39 -0400 Date: Thu, 2 Apr 2009 13:34:38 -0400 To: questions@freebsd.org Message-ID: <20090402173438.GA25972@skytracker.ca> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.3i X-Delivery-Agent: TMDA/1.1.12 (Macallan) From: David Banning X-Virus-Scanned: ClamAV 0.94.2/9198/Thu Apr 2 02:50:41 2009 on 3s1.com X-Virus-Status: Clean X-Spam-Status: No, score=0.1 required=5.0 tests=ALL_TRUSTED,WEIRD_PORT autolearn=no version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on 3s1.com Cc: Subject: problem redirecting with ipnat X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2009 17:47:35 -0000 I am attempting to route local and external traffic to a second machine on port 85 to apache. The redirection works for external traffic coming in but I cannot seem to redirect local traffic to the secondary machine. Here are my ipnat rules; rdr fxp0 0/0 port 85 -> 192.168.1.10 port 85 rdr tun0 0/0 port 85 -> 192.168.1.10 port 85 rdr dc0 0/0 port 80 -> 192.168.1.1 port 8180 where 192.168.1.1 is the local machine and 192.168.1.10 is the secondary machine the third ipnat entry simply redirects all outgoing browser traffic to squid/dansguardian Here is my ifconfig; [root@3s1 /etc]# ifconfig fxp0: flags=8843 mtu 1500 options=8 inet 209.161.205.12 netmask 0xffffff00 broadcast 209.161.205.255 ether 00:0d:60:09:fc:6e media: Ethernet autoselect (10baseT/UTP) status: active dc0: flags=8843 mtu 1500 options=8 inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255 ether 00:20:78:0e:13:d6 media: Ethernet autoselect (10baseT/UTP) status: active plip0: flags=108810 mtu 1500 lo0: flags=8049 mtu 16384 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 inet6 ::1 prefixlen 128 inet 127.0.0.1 netmask 0xff000000 tun0: flags=8051 mtu 1492 inet 209.161.205.12 --> 207.136.64.7 netmask 0xffffffff Opened by PID 356 [root@3s1 /etc]# Externally, simply http://3s1.com:85 works but will not work locally - wondering if anyone could provide direction here.