From owner-freebsd-net@FreeBSD.ORG Wed Jan 9 11:02:27 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 75A7B16A420 for ; Wed, 9 Jan 2008 11:02:27 +0000 (UTC) (envelope-from Patrick.Oonk@ictu.nl) Received: from ms01.ictu.nl (ms01.ictu.nl [193.172.9.10]) by mx1.freebsd.org (Postfix) with ESMTP id 3359613C45B for ; Wed, 9 Jan 2008 11:02:27 +0000 (UTC) (envelope-from Patrick.Oonk@ictu.nl) X-ASG-Debug-ID: 1199875460-6cc700ab0000-QdxwpM X-Barracuda-URL: http://10.19.5.3:8000/cgi-bin/mark.cgi Received: from igw01.dh24.ictu.nl (localhost [127.0.0.1]) by ms01.ictu.nl (Spam Firewall) with ESMTP id CBA6521712 for ; Wed, 9 Jan 2008 11:44:20 +0100 (CET) Received: from igw01.dh24.ictu.nl ([10.10.2.3]) by ms01.ictu.nl with ESMTP id VgBkvtDmCrmKvBLv for ; Wed, 09 Jan 2008 11:44:20 +0100 (CET) X-ASG-Whitelist: Sender X-ASG-Whitelist: Client Received: from [10.10.10.56] ([10.10.10.56]) by igw01.dh24.ictu.nl with Microsoft SMTPSVC(5.0.2195.6713); Wed, 9 Jan 2008 11:44:20 +0100 Mime-Version: 1.0 (Apple Message framework v753) Content-Transfer-Encoding: 7bit Message-Id: Content-Type: text/plain; charset=US-ASCII; format=flowed To: freebsd-net@freebsd.org From: Patrick Oonk X-ASG-Orig-Subj: NATD problem Date: Wed, 9 Jan 2008 11:44:19 +0100 X-Mailer: Apple Mail (2.753) X-OriginalArrivalTime: 09 Jan 2008 10:44:20.0809 (UTC) FILETIME=[97680B90:01C852AC] X-Barracuda-Connect: UNKNOWN[10.10.2.3] X-Barracuda-Start-Time: 1199875460 X-Barracuda-Virus-Scanned: by ms01.ictu.nl at ictu.nl Subject: NATD problem X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2008 11:02:27 -0000 Dear list users, I have the following problem: I have for example two static nat hosts: host A -redirect_address 192.168.0.2 128.1.1.2 Host B -redirect_address 192.168.0.3 128.1.1.3 I have a webserver running on host A. When I try to reach either host A the 'outside', that works fine. When I try to reach host A from host B on it's external address, i.e. when I try to reach port 80 on 128.1.1.2 with source address 192.168.0.3, I get 'connection refused'. Do I have to do anything special to make this possible? thanks Patrick