Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Jun 2000 15:30:37 -0400
From:      Joseph Vidican <engineer@mnsi.net>
To:        questions@freebsd.org
Subject:   natd and natd
Message-ID:  <39492EDD.AEBD3435@mnsi.net>

next in thread | raw e-mail | index | archive | help
I'm currently running natd on a box acting as a gateway for a private
LAN to access the internet. I would like to source some of it's ports on
it's internet IP to some of the machines inside our network. Something
similar to the following:

Box 1:
	-FreeBSD 3.4/IPFW+natd Gateway (working)
	-internet IP 206.48.122.2
	-private IP 192.168.2.254 (255.255.255.0)
I want people on the internet to be able to connect to 206.48.122.2:80,
and actually get 192.168.2.168:80. Similarily, I'd like to alias
206.48.122.2:21 to 192.168.2.123:21, and 206.48.122.2:12000 to
192.168.2.168:12000.
	Is this possible? Can I have natd performing both functions on the same
machine? Here is how I have natd running currently:

/sbin/natd -m -f /etc/natd.conf -n ed1

natd.conf:

use_sockets no
port 7268 # ipfirewall directs to this port instead of standard natd
port
interface ed1

(EOF)
I tried adding this to /etc/natd.conf, and restarting natd, but it
doesn't work:

redirect_port tcp 192.168.2.168:80 206.48.122.2:80 
redirect_port tcp 192.168.2.168:12000 206.48.122.2:12000 

If I cannot perform this kind of function from the same box that natd
runs on as a gateway; could this be done from a second box with a static
IP address to the internet? (our webserver/ftp/email box) ? I understand
I couldn't alias 21 or 80 if I used this second machine, but I could at
least do port 12000 no?

-- 
Nathan Vidican
webmaster@wmptl.com
Windsor Match Plate & Tool Ltd.
http://www.wmptl.com/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?39492EDD.AEBD3435>