Skip site navigation (1)Skip section navigation (2) 
Date:      Fri, 10 Aug 2001 20:48:55 -0400
From:      "webdesigns COMNET" <webdesigns@comnet.ca>
To:        "Dave" <dave@reason.za.org>
Cc:        <freebsd-security@FreeBSD.ORG>
Subject:   Re: HELP PLEASE!!
Message-ID:  <001c01c121ff$6a1b84d0$0200000a@critter>
References:  <002c01c121dc$2b7a4680$0200000a@critter> <010d01c121dd$e6c8e8a0$3300a8c0@mandy>
next in thread | previous in thread | raw e-mail | index | archive | help 

[-- Attachment #1 --]
Hi Dave,

Thanks for your reply.
I tried what you suggested, and I'm still unable to direct incoming traffic from 64.39.183.78 to the lan client 10.0.0.3. 
Requests for 64.39.183.78 still goto the gateway box.

Here is a few things that my help you determin the problem.

[root@thunder:/etc]-> ifconfig -a
sis0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 64.39.179.9 netmask 0xffffff00 broadcast 64.39.179.255
        inet 64.39.183.72 netmask 0xffffffff broadcast 64.39.183.72
        inet 64.39.183.73 netmask 0xffffffff broadcast 64.39.183.73
        inet 64.39.183.74 netmask 0xffffffff broadcast 64.39.183.74
        inet 64.39.183.75 netmask 0xffffffff broadcast 64.39.183.75
        inet 64.39.183.76 netmask 0xffffffff broadcast 64.39.183.76
        inet 64.39.183.77 netmask 0xffffffff broadcast 64.39.183.77
        inet 64.39.183.78 netmask 0xffffffff broadcast 64.39.183.78
        inet 64.39.183.79 netmask 0xffffffff broadcast 64.39.183.79
        ether 00:30:18:80:20:10
        media: Ethernet autoselect (10baseT/UTP)
        status: active
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 10.0.0.1 netmask 0xff000000 broadcast 10.255.255.255
        ether 00:50:ba:86:16:47
        media: Ethernet autoselect (100baseTX)
        status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        inet 127.0.0.1 netmask 0xff000000
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1492
        inet 64.39.176.9 --> 64.39.160.16 netmask 0xff000000
        Opened by PID 148


[root@thunder:/etc]-> netstat -r
Routing tables

Internet:
Destination        Gateway            Flags    Refs      Use  Netif Expire
default            speede01.access.go UGSc       36       61   tun0
10                 link#2             UC          2        0    rl0 =>
critter            0:50:ba:8a:c2:e4   UHLW        2      688    rl0   1158
chickalicious.com  0:50:ba:ea:60:36   UHLW        0        2    rl0    834
speede01.access.go 64.39.176.9        UH         43        0   tun0
64.39.179/24       link#1             UC          0        0   sis0 =>
shellsandhosting.c link#1             UC          0        0   sis0 =>
lightning/32       link#1             UC          0        0   sis0 =>
this.is.a.vhost/32 link#1             UC          0        0   sis0 =>
mainframe/32       link#1             UC          0        0   sis0 =>
64.39.183.76/32    link#1             UC          0        0   sis0 =>
64.39.183.77/32    link#1             UC          0        0   sis0 =>
64.39.183.78/32    link#1             UC          0        0   sis0 =>
64.39.183.79/32    link#1             UC          0        0   sis0 =>
localhost          localhost          UH          1       73    lo0

[root@thunder:/etc]-> ipnat -l
List of active MAP/Redirect filters:
bimap sis0 10.0.0.3/32  -> 64.39.183.78/32

List of active sessions:
[root@thunder:/etc]->

I have been trying for 3 days to route my webserver to the outside world. All your help and input would be greatly appreciated.

Jason


  ----- Original Message ----- 
  From: Dave 
  To: webdesigns COMNET 
  Sent: Friday, August 10, 2001 4:49 PM
  Subject: Re: HELP PLEASE!!


  Hey,
      I would recommend using ipnat for one instead of natd (Part of  IP Filter).
      No particular reason, just a preference.
      Then its fairly simple,
      
   
  add ipnat_enable="YES"
  to your /etc/rc.conf file.
   
  then 
      echo "bimap sis0 10.0.0.3/32 -> 64.39.183.78/32" >> /etc/ipnat.rules && ipnat -FC -f /etc/ipnat.rules
   
   
  Hope to have helped.
  --Dave.
   
  ----- Original Message ----- 
    From: ShellsAndHosting.com Administration 
    To: freebsd-security@FreeBSD.ORG 
    Sent: Friday, August 10, 2001 9:04 AM
    Subject: routing


    Hi,
    Can someone help me figure out a solution?
    Here is the setup:  modem <-> FreeBSD Gateway <-> switch <-> Lan
    I would like to forward all request from 64.39.183.78 to a lan client 10.0.0.3
    I have tried using -redirect_address 10.0.0.3 64.39.183.78 with natd, but it won't work. Any clue why?
    Interface sis0 is the public interface with 32 ips on it, i would like to route a few of thoose ips through rl0 (the internal interface) to my other lan machines.
    What and how would be my best way?
     
     
     
     

[-- Attachment #2 --]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="MSHTML 5.00.3315.2870" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi Dave,</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>Thanks for&nbsp;your reply.</FONT></DIV>
<DIV><FONT face=Arial size=2>I tried what you suggested, and I'm still unable to 
direct incoming traffic from 64.39.183.78 to the lan client 10.0.0.3. 
</FONT></DIV>
<DIV><FONT face=Arial size=2>Requests for 64.39.183.78 still goto the gateway 
box.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>Here is a few things that my help you determin the 
problem.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>[root@thunder:/etc]-&gt; ifconfig -a<BR>sis0: 
flags=8843&lt;UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST&gt; mtu 
1500<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 64.39.179.9 netmask 
0xffffff00 broadcast 64.39.179.255<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
inet 64.39.183.72 netmask 0xffffffff broadcast 
64.39.183.72<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 64.39.183.73 
netmask 0xffffffff broadcast 
64.39.183.73<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 64.39.183.74 
netmask 0xffffffff broadcast 
64.39.183.74<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 64.39.183.75 
netmask 0xffffffff broadcast 
64.39.183.75<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 64.39.183.76 
netmask 0xffffffff broadcast 
64.39.183.76<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 64.39.183.77 
netmask 0xffffffff broadcast 
64.39.183.77<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 64.39.183.78 
netmask 0xffffffff broadcast 
64.39.183.78<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 64.39.183.79 
netmask 0xffffffff broadcast 
64.39.183.79<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ether 
00:30:18:80:20:10<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; media: Ethernet 
autoselect (10baseT/UTP)<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; status: 
active<BR>rl0: flags=8843&lt;UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST&gt; mtu 
1500<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 10.0.0.1 netmask 
0xff000000 broadcast 
10.255.255.255<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ether 
00:50:ba:86:16:47<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; media: Ethernet 
autoselect (100baseTX)<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; status: 
active<BR>lo0: flags=8049&lt;UP,LOOPBACK,RUNNING,MULTICAST&gt; mtu 
16384<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 127.0.0.1 netmask 
0xff000000<BR>tun0: flags=8051&lt;UP,POINTOPOINT,RUNNING,MULTICAST&gt; mtu 
1492<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 64.39.176.9 --&gt; 
64.39.160.16 netmask 0xff000000<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
Opened by PID 148<BR></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>[root@thunder:/etc]-&gt; netstat -r<BR>Routing 
tables</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Arial 
size=2>Internet:<BR>Destination&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
Gateway&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
Flags&nbsp;&nbsp;&nbsp; Refs&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Use&nbsp; Netif 
Expire<BR>default&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
speede01.access.go UGSc&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
36&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 61&nbsp;&nbsp; 
tun0<BR>10&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
link#2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp; rl0 
=&gt;<BR>critter&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0:50:ba:8a:c2:e4&nbsp;&nbsp; UHLW&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 688&nbsp;&nbsp;&nbsp; rl0&nbsp;&nbsp; 
1158<BR>chickalicious.com&nbsp; 0:50:ba:ea:60:36&nbsp;&nbsp; 
UHLW&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2&nbsp;&nbsp;&nbsp; 
rl0&nbsp;&nbsp;&nbsp; 834<BR>speede01.access.go 
64.39.176.9&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UH&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
43&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; 
tun0<BR>64.39.179/24&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
link#1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; sis0 
=&gt;<BR>shellsandhosting.c 
link#1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; sis0 
=&gt;<BR>lightning/32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
link#1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; sis0 
=&gt;<BR>this.is.a.vhost/32 
link#1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; sis0 
=&gt;<BR>mainframe/32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
link#1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; sis0 
=&gt;<BR>64.39.183.76/32&nbsp;&nbsp;&nbsp; 
link#1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; sis0 
=&gt;<BR>64.39.183.77/32&nbsp;&nbsp;&nbsp; 
link#1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; sis0 
=&gt;<BR>64.39.183.78/32&nbsp;&nbsp;&nbsp; 
link#1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; sis0 
=&gt;<BR>64.39.183.79/32&nbsp;&nbsp;&nbsp; 
link#1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp; sis0 
=&gt;<BR>localhost&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
localhost&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
UH&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 73&nbsp;&nbsp;&nbsp; lo0</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>[root@thunder:/etc]-&gt; ipnat -l<BR>List of active 
MAP/Redirect filters:<BR>bimap sis0 10.0.0.3/32&nbsp; -&gt; 
64.39.183.78/32</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>List of active 
sessions:<BR>[root@thunder:/etc]-&gt;<BR></FONT></DIV>
<DIV><FONT face=Arial size=2>I have been trying for 3 days to route my webserver 
to the outside world. All your help and input would be greatly 
appreciated.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>Jason</FONT></DIV>
<DIV><FONT face=Arial size=2><BR>&nbsp;</DIV></FONT>
<BLOCKQUOTE dir=ltr 
style="BORDER-LEFT: #000000 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px; PADDING-LEFT: 5px; PADDING-RIGHT: 0px">
  <DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV 
  style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B> 
  <A href="mailto:dave@reason.za.org" title=dave@reason.za.org>Dave</A> </DIV>
  <DIV style="FONT: 10pt arial"><B>To:</B> <A href="mailto:webdesigns@comnet.ca" 
  title=webdesigns@comnet.ca>webdesigns COMNET</A> </DIV>
  <DIV style="FONT: 10pt arial"><B>Sent:</B> Friday, August 10, 2001 4:49 
  PM</DIV>
  <DIV style="FONT: 10pt arial"><B>Subject:</B> Re: HELP PLEASE!!</DIV>
  <DIV><BR></DIV>
  <DIV><FONT face=Arial size=2>Hey,</FONT></DIV>
  <DIV><FONT face=Arial size=2>&nbsp;&nbsp;&nbsp; I would recommend using ipnat 
  for one instead of natd (Part of&nbsp; IP Filter).</FONT></DIV>
  <DIV><FONT face=Arial size=2>&nbsp;&nbsp;&nbsp; No particular reason, just a 
  preference.</FONT></DIV>
  <DIV><FONT face=Arial size=2>&nbsp;&nbsp;&nbsp; Then its fairly 
  simple,</FONT></DIV>
  <DIV><FONT face=Arial size=2>&nbsp;&nbsp;&nbsp; </FONT></DIV>
  <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
  <DIV><FONT face=Arial size=2>add ipnat_enable="YES"<BR>to your /etc/rc.conf 
  file.</FONT></DIV>
  <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
  <DIV><FONT face=Arial size=2>then </FONT></DIV>
  <DIV><FONT face=Arial size=2>&nbsp;&nbsp;&nbsp; echo "bimap 
  sis0&nbsp;10.0.0.3/32&nbsp;-&gt;&nbsp;64.39.183.78/32" &gt;&gt; 
  /etc/ipnat.rules&nbsp;&amp;&amp; ipnat -FC -f /etc/ipnat.rules</FONT></DIV>
  <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
  <DIV><FONT face=Arial size=2>&nbsp;</FONT></DIV>
  <DIV><FONT face=Arial size=2>Hope to have helped.</FONT></DIV>
  <DIV><FONT face=Arial size=2>--Dave.</FONT></DIV>
  <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
  <DIV>----- Original Message ----- </DIV>
  <BLOCKQUOTE dir=ltr 
  style="BORDER-LEFT: #000000 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px; PADDING-LEFT: 5px; PADDING-RIGHT: 0px">
    <DIV style="FONT: 10pt arial">
    <DIV style="BACKGROUND: #e4e4e4; font-color: black"><B>From:</B> <A 
    href="mailto:admin@shellsandhosting.com" 
    title=admin@shellsandhosting.com>ShellsAndHosting.com Administration</A> 
    </DIV>
    <DIV><B>To:</B> <A href="mailto:freebsd-security@FreeBSD.ORG" 
    title=freebsd-security@FreeBSD.ORG>freebsd-security@FreeBSD.ORG</A> </DIV>
    <DIV><B>Sent:</B> Friday, August 10, 2001 9:04 AM</DIV>
    <DIV><B>Subject:</B> routing</DIV></DIV>
    <DIV><FONT face=Arial size=2></FONT><BR></DIV>
    <DIV><FONT face=Arial size=2>Hi,</FONT></DIV>
    <DIV><FONT face=Arial size=2>Can someone help me figure out a 
    solution?</FONT></DIV>
    <DIV><FONT face=Arial size=2>Here is the setup:&nbsp; modem &lt;-&gt; 
    FreeBSD Gateway &lt;-&gt; switch &lt;-&gt; Lan</FONT></DIV>
    <DIV><FONT face=Arial size=2>I would like to forward all request from 
    64.39.183.78 to a lan client 10.0.0.3</FONT></DIV>
    <DIV><FONT face=Arial size=2>I have tried using -redirect_address 10.0.0.3 
    64.39.183.78 with natd, but it won't work. Any clue why?</FONT></DIV>
    <DIV><FONT face=Arial size=2>Interface sis0 is the public interface with 32 
    ips on it, i would like to route a few of thoose ips through rl0 (the 
    internal interface) to my other lan machines.</FONT></DIV>
    <DIV><FONT face=Arial size=2>What and how would be my best way?</FONT></DIV>
    <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
    <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
    <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
    <DIV><FONT face=Arial 
size=2></FONT>&nbsp;</DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001c01c121ff$6a1b84d0$0200000a>