From owner-freebsd-questions@FreeBSD.ORG Wed Apr 9 14:19:33 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1E5F537B401 for ; Wed, 9 Apr 2003 14:19:33 -0700 (PDT) Received: from joloxbox.joshualokken.com (12-225-249-250.client.attbi.com [12.225.249.250]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1E1AB43FBD for ; Wed, 9 Apr 2003 14:19:32 -0700 (PDT) (envelope-from joshualokken@attbi.com) Received: from joloxbox.joshualokken.com (localhost.joshualokken.com [127.0.0.1])h39LJBbF022151; Wed, 9 Apr 2003 14:19:17 -0700 (PDT) (envelope-from joshualokken@attbi.com) Received: (from jolok@localhost) by joloxbox.joshualokken.com (8.12.9/8.12.9/Submit) id h39LIrWA022147; Wed, 9 Apr 2003 14:18:53 -0700 (PDT) X-Authentication-Warning: joloxbox.joshualokken.com: jolok set sender to joshualokken@attbi.com using -f Date: Wed, 9 Apr 2003 14:18:53 -0700 From: Joshua Lokken To: abdul Message-ID: <20030409211853.GB21946@joloxbox.joshualokken.com> References: <003301c2feb5$af1a7e80$ea640180@abdul> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <003301c2feb5$af1a7e80$ea640180@abdul> User-Agent: Mutt/1.4i Organization: little to none X-OS: FreeBSD joloxbox.joshualokken.com 4.8-STABLE i386 cc: freebsd-questions@freebsd.org Subject: Re: -redirect_port problem X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Apr 2003 21:19:33 -0000 * abdul (freebsd@citizensbankng.com) wrote: ==> I use a FreeBSD box (version 4.7) as my Internet Proxy machine. I presently ==> use the natd daemon to redirect all HTTP ==> ==> traffic to our web server and POP/SMTP to our mail server. This works well. ==> A portion of my rc.conf file is: ==> ==> natd_program="/sbin/natd" # path to natd, if you want a different one. ==> natd_enable="YES" # Enable natd (if firewall_enable == YES). ==> natd_interface="tl0" # Public interface or IPaddress to use. ==> natd_flags=" -redirect_port tcp 128.1.100.139:80 ==> 207.241.164.30:80 -redirect_port tcp 128.1.100.6:25 25 -redirect_port ==> ==> tcp 128.1.100.6:110 110 -redirect_port tc ==> p 128.1.100.7:80 80 " ==> ==> My Problem ==> ==> In addition to what I have above, I want to redirect all HTTP traffic from a ==> particular external server (a public IP) to port ==> ==> 8080 of a local machine for our mobile banking software. So I modified my ==> rc.conf as follows: ==> ==> natd_flags=" -redirect_port tcp 128.1.100.139:8080 ==> 241.164.30:80 -redirect_port tcp 128.1.100.6:25 25 ==> ==> -redirect_port tcp 128.1.100.6:110 110 -redirect_port tcp 128.1.100.7:80 80 ==> " # ==> I have confirmed that can locally browse to the HTTP based software running ==> on the local machine in question What haven't you confirmed? There isn't a question here; what isn't working? Can you not access the site from the internet? Also, it's not necessary, but I found it easier to keep track of and change nat rules by creating /etc/natd.conf, putting my rules in that file, and calling that from rc.conf : natd_flags="/etc/natd.conf" -- Joshua