Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 9 Sep 2003 16:32:45 -0400
From:      "Thomas Dwyer" <tom@dwyers.ca>
To:        <freebsd-ipfw@freebsd.org>
Subject:   ipfw - natd - Port Forwarding
Message-ID:  <000a01c37711$872b0a00$020010ac@protechnologies>

next in thread | raw e-mail | index | archive | help
Hello;

I'm having a problem getting port forwarding working with FreeBSD 4.8.

I have the following options compiled in the kernel:

options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=3D15
options IPDIVERT
options IPFIREWALL_DEFAULT_TO_ACCEPT

My ipfw config is:

00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
00500 divert 8668 ip from any to any via fxp0
65535 allow ip from any to any


The applicable options I have specified in rc.conf are:

firewall_enable=3D"YES"
gateway_enable=3D"YES"
firewall_type=3D"OPEN"
natd_enable=3D"YES"
natd_interface=3D"fxp0"
natd_flags=3D"-f /etc/natd.conf"

And in the natd.conf file I have:

log yes
interface fxp0
use_sockets yes
same_ports yes
redirect_port tcp 192.168.0.1:27015 27015

The workstation 192.168.0.1 is a Windows 2000 machine.  The default =
gateway is the internal IP address of the firewall which is =
192.168.0.254

All internet browsing, tracert, ping etc works from the Windows 2000 =
machine out to the internet.

I have telnet server running on the windows 2000 machine listening on =
port 27015.  I can telnet to it from another workstation on the LAN as =
well as from the firewall directly through the LAN interface.

When I try it from an outside source it looks like traffic is arriving =
at the Windows 2000 machine (the little computer screens for the LAN =
connection flash on the tray icon) but the connection doesn't complete =
and it times out.

Help!
Tom



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000a01c37711$872b0a00$020010ac>