From owner-freebsd-questions Thu Feb 28 19:35:20 2002 Delivered-To: freebsd-questions@freebsd.org Received: from homer.futureuse.net (c35884.randw1.nsw.optusnet.com.au [203.164.229.155]) by hub.freebsd.org (Postfix) with SMTP id 2E5D637B402 for ; Thu, 28 Feb 2002 19:35:07 -0800 (PST) Received: (qmail 93586 invoked from network); 1 Mar 2002 03:29:22 -0000 Received: from unknown (HELO futureuse.net) (127.0.0.1) by localhost with SMTP; 1 Mar 2002 03:29:22 -0000 Received: from 203.11.225.5 (proxying for 10.140.148.30) (SquirrelMail authenticated user fbsdlist) by www.futureuse.net with HTTP; Fri, 1 Mar 2002 14:29:22 +1100 (EST) Message-ID: <14981.203.11.225.5.1014953362.squirrel@www.futureuse.net> Date: Fri, 1 Mar 2002 14:29:22 +1100 (EST) Subject: Re: NATD PCANYWHERE! From: "Aaron Hill" To: In-Reply-To: References: X-Priority: 3 Importance: Normal X-MSMail-Priority: Normal Cc: X-Mailer: SquirrelMail (version 1.2.4) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > Hello, > > I have FreeBSD 4.5 with natd/ipfw, all I want to do is redirect > pcanywhere traffic. Internet traffic is routing correctly. > > Here is my /etc/natd.conf > interface dc1 > use_sockets yes > same_ports yes > > redirect_port tcp x.x.x.x:5631 x.x.x.x:5631 > redirect_port tcp x.x.x.x:5632 x.x.x.x:5632 > > And here is my handy script I wrote > #!/bin/sh > natd -f /etc/natd.conf > /sbin/ipfw -f flush > /sbin/ipfw add divert natd all from any to any via dc1 > /sbin/ipfw add pass all from any to any > > What gives? I get Connection Refused... Douglas, Here's how I've got it working. You need these lines in /etc/natd.conf ... # Allow incoming traffic on that NAT address deny_incoming no # pcAnywhere redirect_port tcp xxx.xxx.xxx.xxx:5631 5631 redirect_port udp xxx.xxx.xxx.xxx:5632 5632 ... where xxx.xxx.xxx.xxx is the IP address of your PC-Anywhere host. Your firewall rules look OK. I think the problem is you are allowing TCP 5632 when you actually need UDP 5632. > > Thanks, > > Douglas A. Maske > Consultant > All Bases Covered, Inc. > Aaron Hill. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message