Re: NAT Problem - Please Help
Carlos Rodrigues <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <[email protected]> |
On Sun, Oct 18, 2009 at 12:38 PM, Andrei Verovski (aka MacGuru) <[email protected]> wrote: > Hi, folks, > > I have firehol running on SuSE Linux for a long time, with NAT/port forwarding > working OK. > > Now I'm need to set up another NAT/port forwarding rule - incoming traffic on > external interface "${if_world}" port 20080 must be redirected to > 192.168.0.15 port 80 > > I have wrote these rules: > > server_fxoweb_ports="tcp/20080" > client_fxoweb_ports="default" > nat to-destination 192.168.0.15:80 inface "${if_world}" proto tcp dport 20080 > > router world2lan inface "${if_world}" outface "${if_lan}" > route fxoweb accept > route ident reject with tcp-reset > > For whatever reason it does not work at all. Instead of "route fxoweb accept", try "route http accept" or "route http accept dst 192.168.0.15". If I remember correctly, the nat is done before the forwarding phase, so the router will see them with their actual destination, and not how they reached the forwarding box. -- Carlos Rodrigues ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference