From owner-freebsd-isp  Mon Apr 15 14: 0:27 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from rwcrmhc54.attbi.com (rwcrmhc54.attbi.com [216.148.227.87])
	by hub.freebsd.org (Postfix) with ESMTP
	id 6531537B419; Mon, 15 Apr 2002 14:00:19 -0700 (PDT)
Received: from InterJet.elischer.org ([12.232.206.8])
          by rwcrmhc54.attbi.com
          (InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP
          id <20020415210019.ISMW15826.rwcrmhc54.attbi.com@InterJet.elischer.org>;
          Mon, 15 Apr 2002 21:00:19 +0000
Received: from localhost (localhost.elischer.org [127.0.0.1])
	by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id NAA88300;
	Mon, 15 Apr 2002 13:50:15 -0700 (PDT)
Date: Mon, 15 Apr 2002 13:50:15 -0700 (PDT)
From: Julian Elischer <julian@elischer.org>
To: apache@ukr.net
Cc: isp@freebsd.org, hackers@freebsd.org
Subject: Re: ipfw fwd to named
In-Reply-To: <200204151653.g3FGr1Wb051955@server1.office.bezpeka.net>
Message-ID: <Pine.BSF.4.21.0204151349270.74157-100000@InterJet.elischer.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

I'm not sure the the forwarding code works for udp..
(In fact I'm pretty sure it is not fully implemented)


On Mon, 15 Apr 2002 apache@ukr.net wrote:

> Hi.
> 
> I have network interface rl0
> 
> rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         inet 192.168.10.22 netmask 0xffffff00 broadcast 192.168.10.255
>         inet 192.168.10.26 netmask 0xffffffff broadcast 192.168.10.26
>         ether 00:60:52:0b:a3:0a
>         media: Ethernet autoselect (100baseTX <full-duplex>)
>         status: active
> 
> In named.conf
> 
>         listen-on port 2053 {
>                 192.168.10.26;
>         };
> 
> Named works fine in JAIL
>         dig -p 2053 @192.168.10.26 test.domain
> 
> I want to forward all 192.168.10.22:53 queries to the jailed named.
> 
>         ifpw add 300 fwd 192.168.10.26,2053 udp from any to 192.168.10.22 53
>         ifpw add 310 fwd 192.168.10.26,2053 tcp from any to 192.168.10.22 53
> 
> When i launch dig without port options to the server 192.168.10.22 it says
> that connection refused.
> 
>         I did same this sshd (put it in jail and forward its port) and
>         it works fine.
> 
> What's wrong?
> 
> --
> e-mail: apache@ukr.net
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-hackers" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message