On 19 April 2013 11:45, Gary Gendel <g...@genashor.com> wrote: > Jon, > > I redirect ports fine using nat. I'm trying to understand what's > different between your and my setup. For example in my ipnat.conf file I > have: > > rdr bge0 0.0.0.0/0 port 2022 -> 10.101.1.9 port 22 tcp/udp > > Where bge0 is my external nic (bge1 is my internal nic). BTW, I use > 0.0.0.0/0 so it automatically picks up my external nic's ip address (I've > have pseudo-dynamic IP from my ISP). > > I originally used 0.0.0.0/0 but was wondering if it was capturing packets coming through so limited to the external IP address ...
I use ipnat happily on another machine for transparent proxying: # redirect all port 80 transactions to squid rdr internal2 any port 80 -> 192.168.0.82 port 3128 # NAT all port 443 (https) to the external address directly. map external2 from any to 83.138.182.145 port = 443 -> 94.136.227.100/32 and that works a charm. I modified ipf.conf to allow and log everything ... then lines from ipmon are: 19/04/2013 12:53:30.895801 iprb0 @0:2 p n.n.180.45,46135 -> 192.168.0.12,143 PR tcp len 20 40 -R IN NAT 19/04/2013 12:53:30.895818 bge0 @0:1 p n.n.180.45,46135 -> 192.168.0.12,143 PR tcp len 20 40 -R OUT 19/04/2013 12:53:32.799328 iprb0 @0:2 p n.n.180.45,46607 -> 192.168.0.12,143 PR tcp len 20 52 -S IN NAT 19/04/2013 12:53:32.799344 bge0 @0:1 p n.n.180.45,46607 -> 192.168.0.12,143 PR tcp len 20 52 -S OUT 19/04/2013 12:53:36.176407 iprb0 @0:2 p n.n.180.45,46607 -> 192.168.0.12,143 PR tcp len 20 52 -S IN NAT 19/04/2013 12:53:36.176423 bge0 @0:1 p n.n.180.45,46607 -> 192.168.0.12,143 PR tcp len 20 52 -S OUT 19/04/2013 12:53:42.239530 bge0 @0:1 p 192.168.0.20,138 -> 192.168.0.255,138 PR udp len 20 267 IN mbcast 19/04/2013 12:53:42.935736 iprb0 @0:2 p n.n.180.45,46607 -> 192.168.0.12,143 PR tcp len 20 52 -S IN NAT 19/04/2013 12:53:42.935752 bge0 @0:1 p n.n.180.45,46607 -> 192.168.0.12,143 PR tcp len 20 52 -S OUT but if I snoop from 192.168.0.12 there are no packets coming in. strange ... I'm sure I'm just missing something little. Jon _______________________________________________ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss