nat redirect-to
Tony Peña <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <CALBaCdtsH9rTi-8xTCoWK1AQX6HPLB3hEKi3X26v+rxzWU_-Ag@mail.gmail.com> |
hi. i'm trying to redirecting udp packaets from RADIUS NAS to other server
for test new version.
i try to put this into my server with old-radius to can redirect all thouse
packages to back a new server version
and the syntaxs is ok because firehol try works fine.. but i see in the old
server continues packages comming as nothing happend..
so, .. some data to can help more easy this is my situation
many NAS (16 ips)
NAS_IPS='w.x.y.z'
older version normal
interface eth0 inet
policy drop
server radius accept src "$NAS_IPS"
client all accept
now my problem.
nat redirect-to 1812 inface eth0 src "$NAS_IPS" proto udp
new.radius.server.ip dport 1812
nat redirect-to 1813 inface eth0 src "$NAS_IPS" proto udp
new.radius.server.ip dport 1813
interface eth0 inet
policy drop
#server radius accept src "$NAS_IPS"
client all accept
and nothing happens,..
remember 1812 is for autorization/authentication and 1813 is accounting. so
need redirecto both ports to new server.
thanxs in advance.
--
Antonio Peña
Secure email with PGP 0x8B021001 available at http://pgp.mit.edu
Fingerprint: 74E6 2974 B090 366D CE71 7BB2 6476 FA09 8B02 1001
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Firehol-support mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/firehol-support