Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 23 Dec 2000 22:23:22 -0500
From:      "Box1" <edukation@crosswinds.net>
To:        <freebsd-stable@FreeBSD.ORG>
Subject:   4.1.1-Stable and natd
Message-ID:  <000f01c06d58$df17c340$0300a8c0@swahilie.net>

next in thread | raw e-mail | index | archive | help
FreeBSD-4.1.1-Stable
Box-A= gateway
Box-B= Apache, ircd, etc... servers

I'm not able to redirect *only* http/https incoming-packets on my outside
interface to a box on my local network.  Below if from my /etc/rc.conf and
/etc/natd.conf;
-
natd_enable="YES"
natd_flags="-f /etc/natd.conf"
natd_interface="de0"
-
redirect_port tcp 192.168.0.2:6667-7000 6667-7000 <-- this works fine
redirect_port tcp 192.168.0.2:25 25  <-- this works fine
redirect_port tcp 192.168.0.2:80 80  <-- this will *not* work
redirect_port tcp 192.168.0.2:443 443  <-- this will *not* work

While these redirects are in place, I have used anonymizer.com to make it
seem I'm on the outside of my local network and, surf to my URL using a FQDN
and alternatively my ISP assigned 'ip'.  I then view my ipfw logs on box-A
with; tail -f  /var/log/security which shows the following;
Dec 23 20:48:55 Box-A /kernel: ipfw: 5100 Count TCP 216.34.244.18:32176
my.external.ip:80 in via de0
-
I now do a tcpdump -i de0 (while anonymizer.com tries to surf as described
above) results show below;
21:03:36.298039 bellatrix.anonymizer.com.2783 > my.external.ip.http: S
276149746:276149746(0) win 32120 <mss 1460,sackOK,timestamp 1419389851
0,nop,wscale 0> (DF)

My take from this is, the gateway is seeing the packets.  At the same time
on box-B, I am doing tail -f /var/log/security  and i see nothing hitting
the apache servers ports.  I have tried using other ports in place of 80 and
443, but, the redirects to my *known* working Apache does not happen.

assistance needed.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000f01c06d58$df17c340$0300a8c0>