Date: Tue, 16 Apr 2002 22:39:18 -0700 From: "Crist J. Clark" <cjc@FreeBSD.ORG> To: apache@ukr.net Cc: isp@FreeBSD.ORG, hackers@FreeBSD.ORG Subject: Re: ipfw fwd to named Message-ID: <20020416223918.B59924@blossom.cjclark.org> In-Reply-To: <200204151653.g3FGr1Wb051955@server1.office.bezpeka.net>; from apache@ukr.net on Mon, Apr 15, 2002 at 07:53:01PM %2B0300 References: <200204151653.g3FGr1Wb051955@server1.office.bezpeka.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Apr 15, 2002 at 07:53:01PM +0300, apache@ukr.net wrote:
> Hi.
>
> I have network interface rl0
>
> rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
> inet 192.168.10.22 netmask 0xffffff00 broadcast 192.168.10.255
> inet 192.168.10.26 netmask 0xffffffff broadcast 192.168.10.26
> ether 00:60:52:0b:a3:0a
> media: Ethernet autoselect (100baseTX <full-duplex>)
> status: active
>
> In named.conf
>
> listen-on port 2053 {
> 192.168.10.26;
> };
>
> Named works fine in JAIL
> dig -p 2053 @192.168.10.26 test.domain
>
> I want to forward all 192.168.10.22:53 queries to the jailed named.
>
> ifpw add 300 fwd 192.168.10.26,2053 udp from any to 192.168.10.22 53
> ifpw add 310 fwd 192.168.10.26,2053 tcp from any to 192.168.10.22 53
>
> When i launch dig without port options to the server 192.168.10.22 it says
> that connection refused.
>
> I did same this sshd (put it in jail and forward its port) and
> it works fine.
>
> What's wrong?
Have you done a tcpdump(1) on the loopback to see what is going on?
# tcpdump -ni lo0
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020416223918.B59924>