rdr help

Luiz Casey <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <OFD6611278.E387E95A-ON8525743C.0049FD3D-8525743C.004B87D2@american.edu>

Hello all,
      I am trying to do something a bit complicating and was wondering if
some of you had tried this is in the past or had any tips. First off
ipfilter has been wonderful, helpful and is a great tool. Now to the
issue/problem I am having. We are running a couple zones on a T2000 one
zone with a world access IP address ie. 147.9.X.X. We then want to create a
separate zone on a private subnet ie. 192.168.1.2  which currently does not
have any world access. What I would like and am trying to do is take
ipfilter/ipnat and use RDR to redirect 2 ports from Global zone to Zone B.
I have tried the configuration bellow but have not been successful.  Any
help would be appreciated and is this even possible.  We are running
ipfilter/ipnat that came with Solaris 10.

Global = 147.9.X.X e1000g1
Zone A = 147.9.X.X e1000g1:1
ZoneB = 192.168.1.2 e1000g1:2


ipnat.conf on the Global zone.

# forward from a public port to a private zone port
 rdr eg1000g1 147.9.X.X port 2222 -> 192.168.1.2 port 22

# allow any 192.168.1.x zone to use the internet
map eg1000g1 192.168.1.0/24 -> 0/32
map eg1000g1 192.168.1.0/24 -> 0/32
map eg1000g1 192.168.1.0/24 -> 0/32

ipfilter.conf on Global zone.

# IP Filter rules syntax.
# Testing purposes
pass in quick log on e1000g1 from any to any


Luiz Casey
Office: (202) 885-2692
Cell: (202) 403-1209
[email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.