Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 Sep 2000 21:35:06 -0700 (PDT)
From:      Philip Hallstrom <philip@adhesivemedia.com>
To:        "seafug@dub.net" <seafug@dub.net>
Cc:        Chip <chip@wiegand.org>, "freebsd-questions@freebsd.org" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: natd does port forwarding?
Message-ID:  <Pine.BSF.4.21.0009202132560.97275-100000@oddjob.i.adhesivemedia.com>
In-Reply-To: <20000920212502.W367@149.211.6.64.reflexcom.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> On Wed, Sep 20, 2000 at 06:02:34PM -0700, Chip wrote:
> > I believe it works now, I tried at work at it redirected to my
> > home web server and the page loaded fine, would you be so kind
> > as to do the same? www.wiegand.org There is a 5 second delay.
> > The only differance at this time is at the bottom of the page
> > that
> > loads on my home server, it has a paragraph that states this is 
> > loaded on my home server.
> > I cannot load it from within my home network, though I think I 
> > understand why. Correct me if I'm wrong -
> > a packet goes out from 192.168.0.6, is translated to
> > 208.194.173.26
> > returns to 208.194.173.26 and is translated back to 192.168.0.6
> > then the web page tries to load from my home server but there is
> > no
> > route between the inside and outside nics, so it can't be loaded 
> > into the inside network pc. Maybe I'm confused.  ;-)
> 
> I actually just explained this problem to someone else on -questions
> last night. Go to the archive and check the thread with the subject,
> "internal to internal via natd extenal redirect_port."
> 
> As I said to that poster, this is a pain to do.

It's not too bad...  just run natd on your internal port in reverse mode
with all the redirect options... it works... but it also causes other
nasty problems...

like if you telnet (just for the sake of argument) from outside to an
inside box and do a "who" it says you're coming from your firewall.  Now
apply that to sendmail and relaying and yikes..

Seems easier to just run to copies of DNS and set your internal clients to
listen to one and the rest of the world to listen to the other... that's
what I do... it's a pain, but not that bad..

-philip



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0009202132560.97275-100000>