Re: Was: how to reach modem on WAN port
Fred Wright <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.m0n0wall |
|---|---|
| Message-ID | <[email protected]> |
On Thu, 20 Jan 2011, Anders Hagman wrote: > Hi > > I have used a modem outside m0n0wall with http and syslog for some time. > The modem has the address 192.168.1.1 in my example. > > 1. First I have added a secondary address with a shell command into the > xml file. > > <system> > <shellcmd>ifconfig xl0 192.168.1.2/24 alias</shellcmd> > > 2. Turn on outbound advanced NAT and add a rule for normal traffic and > traffic to the modem. Use the secondary address as the target address. > This to make HTTP to the modem work. > > WAN 172.16.2.0/24 ! 192.168.1.1/32 * Normal LAN NAT > WAN 172.16.2.0/24 192.168.1.1/32 192.168.1.2 D-Link modem Alternatively, if the modem can be configured to use 192.168.1.2 as its default gateway, then the second NAT rule is unnecessary. [...] Fred Wright