Re: Port forwarding and NAT

add the following to the "start)" section of /etc/rc.d/firewall.local
    # make mailserver send out on registered address XXX.XXX.XXX.244 
rather than default
     iptables -t nat -I CUSTOMPOSTROUTING 1 -s <internal mail server 
address> -o wan-1 -p tcp --dport 25 -j SNAT --to-source XXX.XXX.XXX.244

the -I before CUSTOMPOSTROUTING is a capital I for Indigo  (Insert)

you can also enter that command at the command line to make it happen "now"
putting it in /etc/rc.d/firewall.local means it will get done again when 
the box reboots.

Dave

On 07/04/2016 20:15, Brad Morgan wrote:
> In IPCop, it must be done manually. Version 1.4 had an add on that enhanced
> the GUI but nothing exists for 2.1 despite numerous requests for such a
> feature.
>
> If you search this mailing list archives ("Source NAT" might be a good
> search string) you should find what you need.
>
> I solved the problem by switching to a different firewall distribution. Both
> Endian and IPFire have a GUI feature that will set this up for you.
>
> -----Original Message-----
> From: Joe Acquisto-j4 [mailto:[email protected]]
> Sent: Thursday, April 07, 2016 12:18 PM
> To: [email protected]; [email protected]
> Subject: Re: [IPCop-user] Port forwarding and NAT
>
> I believe the answer is yes.   I did this years ago for a voiceIP system.
> You will need to do a custom IP tables thing and stick it in one of the
> files that
> don't get overwritten by updates.    I don't remember the specifics, but
> examples may exist in the wild.   I can try to find the backups I made but
> it will a couple days.
>
>
>>>> "Matt Wilkerson" <[email protected]> 04/07/16 11:30 AM
> I have port forwarding working from an outside IP to an inside IP. I am told
> I need to set up 1-to-1 NAT in both directions for the server. If I
> understand correctly the port forwarding is for the incoming traffic.
>
>   
>
> We are on a Comcast connection and all traffic leaves here under 1 IP
> address, XXX.XXX.XXX.241. The server above is XXX.XXX.XXX.244. Is it
> possible to make traffic coming from the inside IP, 192.168.1.15, to leave
> IPCop as XXX.XXX.XXX.244?
>
>   
>
> matt
>
>
> NOTICE: E-MAIL TO OR FROM THE DECATUR PUBLIC LIBRARY STAFF MEMBERS MAY BE
> SUBJECT TO DISCLOSURE PURSUANT TO THE ILLINOIS FREEDOM OF INFORMATION ACT.
>
> CONFIDENTIALITY NOTICE: This message is intended for the use of the
> individual or entity to which it is addressed and may contain information
> that is privileged, confidential and exempt from disclosure under applicable
> law. If the reader of this message is not the intended recipient or the
> employee or agent responsible for delivering this message to the intended
> recipient, you are hereby notified that any dissemination, distribution or
> copying of this communication is strictly prohibited. If you have received
> this communication in error, please notify us immediately by email reply.
> ----------------------------------------------------------------------------
> --
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe
> https://lists.sourceforge.net/lists/listinfo/ipcop-user
>
>
>
> ----------------------------------------------------------------------------
> --
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe
> https://lists.sourceforge.net/lists/listinfo/ipcop-user
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe
> https://lists.sourceforge.net/lists/listinfo/ipcop-user


------------------------------------------------------------------------------
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user