Date: Fri, 11 Aug 2000 09:48:33 +0300 From: Ruslan Ermilov <ru@sunbay.com> To: cjclark@alum.mit.edu Cc: Kevin Weiss <kweiss@jump.net>, FreeBSD Questions <freebsd-questions@FreeBSD.ORG> Subject: Re: NATD and port redirections Message-ID: <20000811094833.C21020@sunbay.com> In-Reply-To: <20000810224525.H5405@149.211.6.64.reflexcom.com>; from cjclark@reflexnet.net on Thu, Aug 10, 2000 at 10:45:25PM -0700 References: <965953690_PM_BeOS.kweiss@jump.net> <20000810224525.H5405@149.211.6.64.reflexcom.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Aug 10, 2000 at 10:45:25PM -0700, Crist J . Clark wrote:
> On Fri, Aug 11, 2000 at 12:28:10AM +0000, Kevin Weiss wrote:
> > My NATD doesn't seem to be redirecting smtp requests from my
> > firewall machine to my internal mail server. Can somebody tell me
> > if the following configuration is correct?
> >
> > I created /etc/rc.natd, and here's the output.
> >
> > #Initial Setup
> > use_socket yes
> > same_ports yes
> > unregistered_only yes
> >
> > #Port Redirection Rules
> > . . . (other redirects commented out for now)
> > redirect_port tcp 192.168.1.2:25 25
> > . . .(other redirects commented out for now)
> >
> >
> > In my firewall rules (using a "simple" firewall), I have the following:
> > . . .
> > $fwcmd add 804 allow tcp from any 25 to ${oip}
> > $fwcmd add 804 allow tcp from ${oip} to any 25
> > . . .
>
> Not enough info, the 'ipfw show,' input would be usefull, but I
> supsect this is your problem. If you based your ruleset on the
> distributed rc.firewall, the address has probably already been
> translated when it hits this rule and does not pass.
>
Please note that this has been fixed in 3.5-STABLE.
--
Ruslan Ermilov Oracle Developer/DBA,
ru@sunbay.com Sunbay Software AG,
ru@FreeBSD.org FreeBSD committer,
+380.652.512.251 Simferopol, Ukraine
http://www.FreeBSD.org The Power To Serve
http://www.oracle.com Enabling The Information Age
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000811094833.C21020>