Hello,
 
I was trying to set up a network with both Port Address Translation and Network Address Translation on FreeBSD 5.1 with ipfilter & ipnat.
 
my /etc/ipf.rules are
pass in all
pass out all
 
Mainly I set up the BSD box, added IPFILTER support in the kernel and created /etc/ipf.rules and /etc/ipnat.conf
 
map fxp0 192.168.200.0/24 -> 209.x.x.2/32 proxy port ftp ftp/tcp
map fxp0 192.168.200.0/24 -> 209.x.x.2/32 portmap tcp/udp 10000:65000
map fxp0 192.168.200.0/24 -> 209.x.x.2/32
rdr fxp0 209.x.x.2/32 port 5900 -> 192.168.200.254 port 5900
bimap fxp0 209.x.x.253/32 -> 192.168.200.253/32
My internal network is 192.168.200.0/24 on the xl0 interface
 
My external network is 209.x.x.0/24 on the fxp0 interface
 
Mapping all machines inside to outside IP works without any problem (209.x.x.2 is the fxp0 interface IP)
 
also the port redirection for vnc works well if I use the interface IP again
 
I have been trying different combinations for bimap for over 2 hours and still I am not successfull.
 
Nothing happens and when I try to ping 209.x.x.253 from another host in the external network, it simply does not get any response.
 
I have checked at least 20 different web sites/mailing list archives and the examples look the same.
 
I also thought about adding 209.x.x.253 to the fxp0 interface as an alias. But I am not sure if I have to, so I will do it after the comments.
 
 
Any suggestions will be greatly appreciated.
 
Best Regards,
Kaan G. Celik
 

Reply via email to