From owner-freebsd-hackers  Mon Apr 15  9:54:49 2002
Delivered-To: freebsd-hackers@freebsd.org
Received: from relay.office.bezpeka.net (gw.office.bezpeka.net [193.108.112.118])
	by hub.freebsd.org (Postfix) with ESMTP
	id EF62F37B404; Mon, 15 Apr 2002 09:54:38 -0700 (PDT)
Received: from server1.office.bezpeka.net (localhost [127.0.0.1])
	by relay.office.bezpeka.net (8.12.0/8.12.0) with ESMTP id g3FGr1P6051956;
	Mon, 15 Apr 2002 19:53:01 +0300 (EEST)
Received: (from root@localhost)
	by server1.office.bezpeka.net (8.12.0/8.12.0/Submit) id g3FGr1Wb051955;
	Mon, 15 Apr 2002 19:53:01 +0300 (EEST)
Date: Mon, 15 Apr 2002 19:53:01 +0300 (EEST)
From: apache@ukr.net
Message-Id: <200204151653.g3FGr1Wb051955@server1.office.bezpeka.net>
To: isp@freebsd.org
Subject: ipfw fwd to named
Cc: hackers@freebsd.org
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

Hi.

I have network interface rl0

rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 192.168.10.22 netmask 0xffffff00 broadcast 192.168.10.255
        inet 192.168.10.26 netmask 0xffffffff broadcast 192.168.10.26
        ether 00:60:52:0b:a3:0a
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active

In named.conf

        listen-on port 2053 {
                192.168.10.26;
        };

Named works fine in JAIL
        dig -p 2053 @192.168.10.26 test.domain

I want to forward all 192.168.10.22:53 queries to the jailed named.

        ifpw add 300 fwd 192.168.10.26,2053 udp from any to 192.168.10.22 53
        ifpw add 310 fwd 192.168.10.26,2053 tcp from any to 192.168.10.22 53

When i launch dig without port options to the server 192.168.10.22 it says
that connection refused.

        I did same this sshd (put it in jail and forward its port) and
        it works fine.

What's wrong?

--
e-mail: apache@ukr.net

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message