From owner-freebsd-questions@FreeBSD.ORG  Tue Jul  5 11:15:42 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 27DDB16A41C
	for <freebsd-questions@freebsd.org>;
	Tue,  5 Jul 2005 11:15:42 +0000 (GMT)
	(envelope-from dmitry.mityugov@gmail.com)
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.201])
	by mx1.FreeBSD.org (Postfix) with ESMTP id D926543D46
	for <freebsd-questions@freebsd.org>;
	Tue,  5 Jul 2005 11:15:41 +0000 (GMT)
	(envelope-from dmitry.mityugov@gmail.com)
Received: by wproxy.gmail.com with SMTP id 36so875833wra
	for <freebsd-questions@freebsd.org>;
	Tue, 05 Jul 2005 04:15:41 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=n8kCdDz1MV+EiSN0uwZVEAl1a9qR+Y+vk7M+ucIADSfQuL4D+o20jV4l0XdKQvrJTiHirPuPoCpsEiXE+nUnN9jweepAk2ZcVMOuGzpTNJUyNlHl3GHRaayM4Nr6bJ3R3Q0aL87Xd0ACBA44a3eqF2TyJ2WlAXlGkMd08QEeptg=
Received: by 10.54.29.17 with SMTP id c17mr1916253wrc;
	Tue, 05 Jul 2005 04:15:41 -0700 (PDT)
Received: by 10.54.56.33 with HTTP; Tue, 5 Jul 2005 04:15:41 -0700 (PDT)
Message-ID: <b7052e1e05070504151cfc1f9f@mail.gmail.com>
Date: Tue, 5 Jul 2005 15:15:41 +0400
From: Dmitry Mityugov <dmitry.mityugov@gmail.com>
To: Roman Kouzmenko <roman@elance.ch>
In-Reply-To: <0F6AE12F69D1854B9098F77A268ED1302551@hyperion.elance.ch>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <0F6AE12F69D1854B9098F77A268ED1302551@hyperion.elance.ch>
Cc: freebsd-questions@freebsd.org
Subject: Re: Running FreeBSD server behind a firewall with nat
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Dmitry Mityugov <dmitry.mityugov@gmail.com>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Jul 2005 11:15:42 -0000

On 7/5/05, Roman Kouzmenko wrote:
...
> Now I need to put it on the Internet, so that the developers can take
> control over it (ssh, ftp). The problem is that at the moment when I
> activate one-to-one nat on my hardware firewall for this machine, the
> services stop working and behave strangely (for example, if I connect to
> the box using ssh, it prompts for the login and nothing else happens,
> ftp doesn't work either). If I try to reboot, sendmail doesn't start at
> all (it just hangs, so I have to hit ^C to stop the script).
...

sendmail probably does not hang but just tries to resolve a name via
DNS that apparently is not working. It should continue in a few
minutes if you wait that long.

What hardware firewall are you using? Is it possible to attach your
server to the Internet directly, without using a firewall in the
middle?

--=20
Dmitry

"We live less by imagination than despite it" - Rockwell Kent, "N by E"