> i mean when i tried to connect to that ip with an outside-the-firewall
> connection none of the port forwards worked...
>
> # ip addr list
> ...
> 2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
>     link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
>     inet 64.113.72.222/24 brd 64.113.72.255 scope global eth0
>     inet 64.113.72.219/24 scope global eth0
> ...
>
>
> my portforwards in network.conf are
> INTERN SERVERS="tcp_${EXTERN_IP}...... so since i use the variable
extern_ip
> i should be listening on both ip's (in theory) but when i svi network
ipfilter
> list portfw it only shows portforwards from the first ip, not to the
second.
> attempts to connect to the second ip, however, do not go through.  i'm
confused
> because ip shows that it's listening on both ip's... is there something
i'm
> missing?

"ip addr list" shows the IP's *ASSIGNED* to the interface, not what's
listening to them.  To see your port-forwards, run "net ipfilter
list"...you'll get an output of your ipchains firewall rules, followed by
port-forwarding information.

Also note that ${EXTERN_IP} is your *PRIMARY* IP address, and does not
include any secondary IP's...

It looks like your additional IP is correctly assigned, so to get port
forwarding to work, you simply need to allow packets through the firewall
rules, and setup a port-forward for them.  In the examples below, I'm
assuming 64.113.72.219 is your secondary IP, and 64.113.72.222 is your
primary IP...if not, switch the statments below as appropriate...

To allow the packets through the firewall, you need to use the indexed
lists, which allow an extended format that specifies the destination IP:

EXTERN_TCP_PORT0="0/0 www  64.113.72.219"

And to port-forward this port to an internal system, you need to use
INTERN_SERVERS:

INTERN_SERVERS="tcp_64.113.72.219_www_192.168.1.1_www"

Charles Steinkuehler
http://lrp.steinkuehler.net
http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)


_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to