Re: Port forwarding and NAT

2 questions.

The files in /etc/rc.d/firewall.local all start with rc. So is
rc.firewall.local the correct file to edit?
If I have multiple ports to map should I up the number after
CUSTOMPOSTROUTING?

Matt 

-----Original Message-----
From: Dave Evans [mailto:[email protected]] 
Sent: Thursday, April 7, 2016 4:09 PM
To: [email protected]
Subject: Re: [IPCop-user] Port forwarding and NAT

add the following to the "start)" section of /etc/rc.d/firewall.local
    # make mailserver send out on registered address XXX.XXX.XXX.244 rather
than default
     iptables -t nat -I CUSTOMPOSTROUTING 1 -s <internal mail server 
address> -o wan-1 -p tcp --dport 25 -j SNAT --to-source XXX.XXX.XXX.244

the -I before CUSTOMPOSTROUTING is a capital I for Indigo  (Insert)

you can also enter that command at the command line to make it happen "now"
putting it in /etc/rc.d/firewall.local means it will get done again when 
the box reboots.

Dave

On 07/04/2016 20:15, Brad Morgan wrote:
> In IPCop, it must be done manually. Version 1.4 had an add on that
enhanced
> the GUI but nothing exists for 2.1 despite numerous requests for such a
> feature.
>
> If you search this mailing list archives ("Source NAT" might be a good
> search string) you should find what you need.
>
> I solved the problem by switching to a different firewall distribution.
Both
> Endian and IPFire have a GUI feature that will set this up for you.
>
> -----Original Message-----
> From: Joe Acquisto-j4 [mailto:[email protected]]
> Sent: Thursday, April 07, 2016 12:18 PM
> To: [email protected]; [email protected]
> Subject: Re: [IPCop-user] Port forwarding and NAT
>
> I believe the answer is yes.   I did this years ago for a voiceIP system.
> You will need to do a custom IP tables thing and stick it in one of the
> files that
> don't get overwritten by updates.    I don't remember the specifics, but
> examples may exist in the wild.   I can try to find the backups I made but
> it will a couple days.
>
>
>>>> "Matt Wilkerson" <[email protected]> 04/07/16 11:30 AM
> I have port forwarding working from an outside IP to an inside IP. I am
told
> I need to set up 1-to-1 NAT in both directions for the server. If I
> understand correctly the port forwarding is for the incoming traffic.
>
>   
>
> We are on a Comcast connection and all traffic leaves here under 1 IP
> address, XXX.XXX.XXX.241. The server above is XXX.XXX.XXX.244. Is it
> possible to make traffic coming from the inside IP, 192.168.1.15, to leave
> IPCop as XXX.XXX.XXX.244?
>
>   
>
> matt
>
>
> NOTICE: E-MAIL TO OR FROM THE DECATUR PUBLIC LIBRARY STAFF MEMBERS MAY BE
> SUBJECT TO DISCLOSURE PURSUANT TO THE ILLINOIS FREEDOM OF INFORMATION ACT.
>
> CONFIDENTIALITY NOTICE: This message is intended for the use of the
> individual or entity to which it is addressed and may contain information
> that is privileged, confidential and exempt from disclosure under
applicable
> law. If the reader of this message is not the intended recipient or the
> employee or agent responsible for delivering this message to the intended
> recipient, you are hereby notified that any dissemination, distribution or
> copying of this communication is strictly prohibited. If you have received
> this communication in error, please notify us immediately by email reply.
>
----------------------------------------------------------------------------
> --
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe
> https://lists.sourceforge.net/lists/listinfo/ipcop-user
>
>
>
>
----------------------------------------------------------------------------
> --
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe
> https://lists.sourceforge.net/lists/listinfo/ipcop-user
>
>
>
----------------------------------------------------------------------------
--
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe
> https://lists.sourceforge.net/lists/listinfo/ipcop-user


----------------------------------------------------------------------------
--
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user


NOTICE: E-MAIL TO OR FROM THE DECATUR PUBLIC LIBRARY STAFF MEMBERS MAY BE SUBJECT TO DISCLOSURE PURSUANT TO THE ILLINOIS FREEDOM OF INFORMATION ACT.

CONFIDENTIALITY NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by email reply.


------------------------------------------------------------------------------
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user