Re: Port forwarding and NAT

Thanks to all who answered, the problem is fixed now.

Matt 

-----Original Message-----
From: Brad Morgan [mailto:b-morgan-NTXU5EFYMyg4d9/[email protected]] 
Sent: Friday, April 8, 2016 12:55 PM
To: 'Matt Wilkerson'; 'Dave Evans'; [email protected]
Subject: RE: [IPCop-user] Port forwarding and NAT

Yes, rc.firewall.local should be the correct file.

I'd suggest that if you have multiple ports to map, just remove "--dport 25"
and perhaps "-p tcp" so that any outside network activity by that computer
will be associated with that IP address (which is what you originally asked
for).

The "1" after CUSTOMPOSTROUTING is the location in the chain where that rule
will be inserted (-I) i.e. at the top of the chain. You can use "-A" to
append to the end of the chain. In this case, order probably doesn't matter.

-----Original Message-----
From: Matt Wilkerson [mailto:[email protected]]
Sent: Friday, April 08, 2016 10:52 AM
To: 'Dave Evans' <[email protected]>;
[email protected]
Subject: Re: [IPCop-user] Port forwarding and NAT

2 questions.

The files in /etc/rc.d/firewall.local all start with rc. So is
rc.firewall.local the correct file to edit?
If I have multiple ports to map should I up the number after
CUSTOMPOSTROUTING?

Matt 

-----Original Message-----
From: Dave Evans [mailto:[email protected]]
Sent: Thursday, April 7, 2016 4:09 PM
To: [email protected]
Subject: Re: [IPCop-user] Port forwarding and NAT

add the following to the "start)" section of /etc/rc.d/firewall.local
    # make mailserver send out on registered address XXX.XXX.XXX.244 rather
than default
     iptables -t nat -I CUSTOMPOSTROUTING 1 -s <internal mail server 
address> -o wan-1 -p tcp --dport 25 -j SNAT --to-source XXX.XXX.XXX.244

the -I before CUSTOMPOSTROUTING is a capital I for Indigo  (Insert)

you can also enter that command at the command line to make it happen "now"
putting it in /etc/rc.d/firewall.local means it will get done again when the
box reboots.

Dave

On 07/04/2016 20:15, Brad Morgan wrote:
> In IPCop, it must be done manually. Version 1.4 had an add on that
enhanced
> the GUI but nothing exists for 2.1 despite numerous requests for such 
> a feature.
>
> If you search this mailing list archives ("Source NAT" might be a good 
> search string) you should find what you need.
>
> I solved the problem by switching to a different firewall distribution.
Both
> Endian and IPFire have a GUI feature that will set this up for you.
>
> -----Original Message-----
> From: Joe Acquisto-j4 [mailto:[email protected]]
> Sent: Thursday, April 07, 2016 12:18 PM
> To: [email protected]; [email protected]
> Subject: Re: [IPCop-user] Port forwarding and NAT
>
> I believe the answer is yes.   I did this years ago for a voiceIP system.
> You will need to do a custom IP tables thing and stick it in one of 
> the files that
> don't get overwritten by updates.    I don't remember the specifics, but
> examples may exist in the wild.   I can try to find the backups I made but
> it will a couple days.
>
>
>>>> "Matt Wilkerson" <[email protected]> 04/07/16 11:30 AM
> I have port forwarding working from an outside IP to an inside IP. I 
> am
told
> I need to set up 1-to-1 NAT in both directions for the server. If I 
> understand correctly the port forwarding is for the incoming traffic.
>
>   
>
> We are on a Comcast connection and all traffic leaves here under 1 IP 
> address, XXX.XXX.XXX.241. The server above is XXX.XXX.XXX.244. Is it 
> possible to make traffic coming from the inside IP, 192.168.1.15, to 
> leave IPCop as XXX.XXX.XXX.244?
>
>   
>
> matt
>
>
> NOTICE: E-MAIL TO OR FROM THE DECATUR PUBLIC LIBRARY STAFF MEMBERS MAY 
> BE SUBJECT TO DISCLOSURE PURSUANT TO THE ILLINOIS FREEDOM OF 
> INFORMATION
ACT.
>
> CONFIDENTIALITY NOTICE: This message is intended for the use of the 
> individual or entity to which it is addressed and may contain 
> information that is privileged, confidential and exempt from 
> disclosure under
applicable
> law. If the reader of this message is not the intended recipient or 
> the employee or agent responsible for delivering this message to the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution or copying of this communication is strictly prohibited.
> If you have received this communication in error, please notify us
immediately by email reply.
>
----------------------------------------------------------------------------
> --
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe 
> https://lists.sourceforge.net/lists/listinfo/ipcop-user
>
>
>
>
----------------------------------------------------------------------------
> --
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe 
> https://lists.sourceforge.net/lists/listinfo/ipcop-user
>
>
>
----------------------------------------------------------------------------
--
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe 
> https://lists.sourceforge.net/lists/listinfo/ipcop-user


----------------------------------------------------------------------------
--
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user


NOTICE: E-MAIL TO OR FROM THE DECATUR PUBLIC LIBRARY STAFF MEMBERS MAY BE
SUBJECT TO DISCLOSURE PURSUANT TO THE ILLINOIS FREEDOM OF INFORMATION ACT.

CONFIDENTIALITY NOTICE: This message is intended for the use of the
individual or entity to which it is addressed and may contain information
that is privileged, confidential and exempt from disclosure under applicable
law. If the reader of this message is not the intended recipient or the
employee or agent responsible for delivering this message to the intended
recipient, you are hereby notified that any dissemination, distribution or
copying of this communication is strictly prohibited. If you have received
this communication in error, please notify us immediately by email reply.


----------------------------------------------------------------------------
--
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user


NOTICE: E-MAIL TO OR FROM THE DECATUR PUBLIC LIBRARY STAFF MEMBERS MAY BE SUBJECT TO DISCLOSURE PURSUANT TO THE ILLINOIS FREEDOM OF INFORMATION ACT.

CONFIDENTIALITY NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by email reply.


------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user