<494f7ec0.5020...@masonc.com> <494fe175.1050...@redfish-solutions.com>
Message-ID: <e6b12e59a1d0aa9f2a8db51a1146c...@localhost>
X-Sender: dhart...@djhsolutions.com
Received: from 64.246.240.54 [64.246.240.54] with HTTP/1.1 (POST); Mon, 22 Dec
2008 14:42:08 -0600
User-Agent: RoundCube Webmail/0.1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
On Mon, 22 Dec 2008 10:50:29 -0800, "Philip A. Prindeville"
<philipp_s...@redfish-solutions.com> wrote:
> Chris Mason (Lists) wrote:
>> Darrick Hartman wrote:
>>
>>>> Really? It was a very popular thing to do on IOS routers...
>>>>
>>>>
>>> Re-read what I said. In my mind it IS something that many people may
>>> want. That's why I thought it would be something beneficial to be in
>>> Arno's firewall upstream and not just a hack for this project.
>>>
>>>
>> I do it all the time - for example, I run internal ssh server access on
>> ports 23-28, one for each machine, so I can ssh to the machine by
>> ssh'ing to the corresponding port. I relocate http to 800+ for similar
>> devices that use web configuration interfaces. I also use it for serving
>> multiple webcams to the public, each one on a port above 80. Since they
>> are onlyu found by redirect, it doesn't matter what port they are on. I
>> could change the port they serve on but that makes maintenance a
> headace.
>> I use Shorewall as my firewall and it is relatively easy to do in
> Shorewall.
>>
>>
>
> That's the curious thing. If I redirect it to another machine then it
> works fine. If the service is running on the firewall host itself, it
> doesn't.
It's probably got something to do with the machine not natting for itself.
I posted a message on the Arno firewall mailing list so hopefully someone
will reply with a work around or get it incorporated into Arno's fw version
1.9.0.
Darrick
------------------------------------------------------------------------------
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
