Re: ipfilter 4.1.34 rdr on solaris 10
James Huang <[email protected]> Tue, 27 Sep 2011 14:37:56 -0700
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Message-ID | <26718_1317159608_4E8242B8_26718_8391_1_CAFpuyR4B221hOy88s+sCoepqmWy8DjsXT9_xg6xPXmJ6=QgUCA@mail.gmail.com> |
--20cf300fafffe1a5d304adf317ce Content-Type: text/plain; charset=ISO-8859-1 I figure out the cause, enable ip forwarding to fix the rdr issue: ndd -set /dev/ip ip_forwarding 1 James On Fri, Sep 23, 2011 at 1:22 PM, James Huang <[email protected]> wrote: > I just put 'any' onto the rule string, once ipnat load, it converts to ' > 0.0.0.0/32', and it works well on solaris 8. > > > > On Fri, Sep 23, 2011 at 11:38 AM, a b <[email protected]> wrote: > >> rdr eri0 0.0.0.0/0 port 16398 -> 172.25.128.236 port 12000 udp >> >> Shouldn't that be "0/32" instead of "0.0.0.0/0"? >> >> > --20cf300fafffe1a5d304adf317ce Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I figure out the cause, enable ip forwarding to fix the rdr issue:<div><br>= </div><div>ndd -set /dev/ip ip_forwarding 1</div><div><br></div><div>James<= /div><div><br><br><div class=3D"gmail_quote">On Fri, Sep 23, 2011 at 1:22 P= M, James Huang <span dir=3D"ltr"><span><<a href=3D"mailto:jamsphon@gmail= .com" target=3D"_blank">[email protected]</a>></span></span> wrote:<br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"><div>I just put 'any' onto the rule = string, once ipnat load, it converts to '<a href=3D"http://0.0.0.0/32" = target=3D"_blank">0.0.0.0/32</a>', and it works well on solaris 8.<br c= lear=3D"all"> <br> <br><br></div><div class=3D"gmail_quote"><div>On Fri, Sep 23, 2011 at 11:38= AM, a b <span dir=3D"ltr"><span><<a href=3D"mailto:[email protected]= om" target=3D"_blank">[email protected]</a>></span></span> wrote:<b= r> </div><div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bor= der-left:1px #ccc solid;padding-left:1ex"> <div><div dir=3D"ltr"> <div><div><div><div>rdr eri0 <a href=3D"http://0.0.0.0/0" target=3D"_blank"= >0.0.0.0/0</a> port 16398 -> 172.25.128.236 port 12000 udp=A0</div> <div><br></div></div><div>Shouldn't that be "0/32" instead of= "<a href=3D"http://0.0.0.0/0" target=3D"_blank">0.0.0.0/0</a>"?<= br><br><div></div></div></div></div> </div></div> </blockquote></div></div><br> </blockquote></div><br> </div> --20cf300fafffe1a5d304adf317ce--