From owner-freebsd-questions@FreeBSD.ORG Wed Jul 9 13:23:27 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BE72737B401 for ; Wed, 9 Jul 2003 13:23:27 -0700 (PDT) Received: from smmcroute.smmc.qld.edu.au (dsl-210-15-201-90.QLD.netspace.net.au [210.15.201.90]) by mx1.FreeBSD.org (Postfix) with ESMTP id C6DC243FB1 for ; Wed, 9 Jul 2003 13:23:25 -0700 (PDT) (envelope-from keith@smmc.qld.edu.au) Received: (qmail 5851 invoked by uid 89); 9 Jul 2003 20:23:12 -0000 Received: from unknown (HELO smmc.qld.edu.au) (127.0.0.1) by 127.0.0.1 with SMTP; 9 Jul 2003 20:23:12 -0000 Received: from 203.220.88.53 (SquirrelMail authenticated user keith) by localhost.smmc.qld.edu.au with HTTP; Thu, 10 Jul 2003 06:23:12 +1000 (EST) Message-ID: <1324.203.220.88.53.1057782192.squirrel@localhost.smmc.qld.edu.au> Date: Thu, 10 Jul 2003 06:23:12 +1000 (EST) From: To: X-Priority: 3 Importance: Normal X-Mailer: SquirrelMail (version 1.2.11) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Subject: IPNAT... internal server what-to-do X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jul 2003 20:23:28 -0000 Hi all. On my 4.7 system, I have ipfilter and ipnat. I have several "live" ips aliased to my external ADSL interface. Some of these are mapped into private internal ips. So far so good. All works fine from outside. But if I want to reach one of the internal servers from inside...eg www.smmc.qld.edu.au...the client hangs looking. Here are some of my rules: ======8< snip============================= map fxp0 10.0.0.0/21 -> 0/32 # <---OK maps internal getting out fine! #www server rdr fxp0 210.15.203.195/32 port 80 -> 10.0.0.7 port 80 rdr dc0 210.15.203.195/32 port 80 -> 10.0.0.7 port 80 #<---No worky! ======8< snip============================= I can figure there is a problem with this but dont have a clue how to fix it I want to use fqdns inside not local ip addrs. It is more convenient for users. BTW the ip address works fine...just the rdr or lookup stuff is faulty Help??? Thanks Keith