Re: Static NAT w/ iptables problem

2004-08-16 Thread Stephen Gran
This one time, at band camp, Markus Trümper said: > > I'm not sure I get you here. Do you want 192.168.1.3 to appear as > > though it's running on 10.80.137.1, > bingo. > > You're just connecting two private networks (one a DMZ), and you set > > aside an IP that will map to the DMZ address, corr

Re: Static NAT w/ iptables problem

2004-08-16 Thread Markus Trümper
> I'm not sure I get you here. Do you want 192.168.1.3 to appear as > though it's running on 10.80.137.1, bingo. > You're just connecting two private networks (one a DMZ), and you set > aside an IP that will map to the DMZ address, correct? Yes. Some additional info as to how this problem came to

Re: Static NAT w/ iptables problem

2004-08-16 Thread Markus Trümper
> What is the value of /proc/sys/net/ipv4/ip_forward ? You either have > to set "ip_forward=yes" in /etc/network/options or do something like > $ echo "1" > /proc/sys/net/ipv4/ip_forward /proc/sys/net/ipv4/ip_forward is "1" > If forwarding is already enabled then please send the output of > "ipta

Re: Static NAT w/ iptables problem

2004-08-14 Thread Philipp Schulte
Markus Trümper wrote: > Testing is done by connecting a dedicated computer to each interface and trying > to reach the one on the internal net from the DMZ. The firewall can reach each > computer and each computer can reach the firewall (ping). > > My rules so far don't work. I can not reach 'se

Re: Static NAT w/ iptables problem

2004-08-14 Thread Stephen Gran
This one time, at band camp, Markus Trümper said: > Hello, > > I'm trying to set up a firewall to do static NAT between two networks: > >internal network > 192.168.1.0/24 > >server 192.168.1.3 >| > LAN_IF 192.168.1.7 > Firewall > EXT_IF 10.80.137.1, 10.80.137.1

Static NAT w/ iptables problem

2004-08-14 Thread Markus Trümper
Hello, I'm trying to set up a firewall to do static NAT between two networks: internal network 192.168.1.0/24 server 192.168.1.3 | LAN_IF 192.168.1.7 Firewall EXT_IF 10.80.137.1, 10.80.137.10 | DMZ 10.80.137.0/24 'server' should be reachable from