<newbie to masq>
Hello list.
I have masquerading is running on a 486, with an NT box behind it. It's
worked
for all of the clients I've tried so far: http(s), email, ftp, ICQ
I am running a 2.0.36 kernel with patches for ipportfw, and am running the
'strong' ruleset defined at
http://members.home.net/ipmasq/ipmasq-HOWTO-1.65-6.html#Strong-Rulesets
This script is running from /etc/sysconfig/network-scripts/ifdhcpc-done
after the dhcp server has assigned my IP.
The 'forward to' NT Box has a local interface IP of 192.168.1.1 and the masq
box has a local IP of 192.168.1.2. This is not a mistake. ;)
At the end of the ipfwadm rules, I have the following forwarding:
ipportfw -C
# internal services
ipportfw -A -t$dynip/80 -R 192.168.1.1/80
ipportfw -A -t$dynip/21 -R 192.168.1.1/21
ipportfw -A -t$dynip/25 -R 192.168.1.1/25
ipportfw -A -t$dynip/110 -R 192.168.1.1/110
# icq client 1
ipportfw -A -t$dynip/25800 -R 192.168.1.1/25800
..
ipportfw -A -t$dynip/25820 -R 192.168.1.1/25820
I browse using my ISP's caching proxy and have successfully connected to my
internal web server through the external proxy, and ICQ seems to be working
fine, but I can't connect to the other forwarded ports: 21, 25, and 110.
If port 80 is forwarding correctly, why wouldn't the others?
I would also like to be able to connect from the NT box, to the external IP,
and then forwarded back to the same NT box. Is this crazy? Because there
is an external DNS name mapping to the external IP, internal clients using
the external DNS will have to connect to the external IP as well, being
forwarded to the internal NT box. I've tried connecting to the services on
the NT box, from the NT box, and couldn't connect to any. I'm not quite
sure what's going on but I know the service is receiving the request. I
need help! :)
Any help, comments, refs, etc. would be greatly appreciated.
Derek
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
