From owner-freebsd-questions Sat Nov 18 14:51:56 2000 Delivered-To: freebsd-questions@freebsd.org Received: from server1.lojasobino.com.br (server1.lojasobino.com.br [200.248.23.150]) by hub.freebsd.org (Postfix) with ESMTP id A342B37B479 for ; Sat, 18 Nov 2000 14:51:48 -0800 (PST) Received: from pc2 (pc2.lojasobino.com.br [128.1.1.101]) by server1.lojasobino.com.br (8.10.2/8.10.2) with SMTP id eAIMs0m17307; Sat, 18 Nov 2000 20:54:02 -0200 (EDT) Message-ID: <001e01c051b1$5bea0ae0$65010180@lojasobino.com.br> From: "Fabrizzio Batista" To: Cc: References: <000701c050d1$afc84ae0$65010180@lojasobino.com.br> <20001117222040.H9740@149.211.6.64.reflexcom.com> Subject: Re: NAT with redirect_port Date: Sat, 18 Nov 2000 20:46:13 -0200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG ----- Original Message ----- From: Crist J . Clark To: Fabrizzio Batista Cc: Sent: Saturday, November 18, 2000 4:20 AM Subject: Re: NAT with redirect_port > On Fri, Nov 17, 2000 at 06:05:06PM -0200, Fabrizzio Batista wrote: > > > > Hi gurus, > > > > I´m using NAT with redirect_port in SMTP and everything is fine when the > > clients are out of my internal net. But when I try to access my internal > > Server from a internal client, the redirect_port in natd not work. > > > > 200.12.1.1 200.12.1.2 192.168.1.2 192.168.1.1 > > Internet -------> Server With NAT ---------> SMTP Server > > From 200.12.1.1 : telnet 200.12.1.2 25 -> It´s Works > > > > 200... 192.168.1.2/ ----------Internal Client > > Server With NAT -----------> SMTP Server -> NOT WORK > > From 192.168.1.3: telnet 200.12.1.2 25 -> It´s not work > > > > natd -n rl0 -redirect_port 192.168.1.1:25 25 > > > > So, anybody help me ??? > > When someone tries to access the internal server from the internal > network, it goes to the NAT machine which accepts the packet. It is > never run through the natd(8) process since the packet never gets > processed on the external interface (the one with the divert(4) rule). > > It is very ugly to try to fix this. It is much easier to use the > local name on the internal machines. If you really want to go the > other way, it involves running another instance of natd(8) on the > internal interface. > -- > Crist J. Clark cjclark@alum.mit.edu > I´ have tried to use nat in two interfaces, but looks like only works in one interface. When I try to use in two interfaces, only the first is that works. I added another divert rule to new interface in ipfw rules. Do you have any idea ??? Thanks, Fabrizzio To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message