Hi,

  I have IMAPS server which is behind firewall and accessible from
outside by simple DNAT rule:

DNAT            net             loc:192.168.201.X:993   tcp     NNNNN

NNNNN is non-standard port.
I am havng trouble configuring shorewall to allow same access form
inside. Even after thorough reading of DNAT documentation I am still
puzzled.
I tried:

DNAT            loc     loc:192.168.201.X:993   tcp     NNNNN - 192.168.201.Y

in rules file where 192.168.201.X is local IMAPS server and
192.168.201.Y is firewall internal address.
I even tried to add:

eth0:192.168.201.X      eth0            192.168.201.Y  tcp     NNNNN

in masq file (eth0 is internal interface on firewall), but connection
always times out. As I can see shorewall is not blocking anything, but
packets are lost somewhere.
Is there any way to achieve this?

Thanks,
Dragan

------------------------------------------------------------------------------
Got visibility?
Most devs has no idea what their production app looks like.
Find out how fast your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219671;13503038;y?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to