Article View: comp.os.linux.networking
Article #160IP-Chains and external access to internal network...HELP
From: Anthony White
Date: Mon, 14 Feb 2000 00:00
Date: Mon, 14 Feb 2000 00:00
47 lines
2329 bytes
2329 bytes
This is getting to much... After 17 kernel re-compiles, numerous tests, trial and error I can still not get people on the Internet onto my internal network:-((( Here is the system: ------------------- A standard RedHat box set up as a firewall between an internal network (192.168.x.x) and an Internet IP address, using the "PmFirewall" scripts. Kernel is 2.2.13 with a lot of un-nescesary stuff removed (SCSI support, some file systems etc.) This works great for MASQ to the Internet from my internal network. Trying to get access from the Internet to a WWW server running on one of the boxes on the internal network is impossible! Or so it seems. I have recompiled the kernel more times than I care to mention due to overlooking some of the switches to enable "portfw" so that "ipmasqadm" could work. Now all is set up according to the man pages but it still will not run. I have tried to use PING to test it, pointed a www browser at it - nothing, no response. The "/lib/modules/2.2.13/ipv4/ip_masq_portfw.o" file does exist and can be loaded - is loaded. This is the command used: /sbin/ipmasqadm portfw -f /sbin/ipmasqadm portfw -a -P tcp -L inet_ip_addr 80 -R 192.168.5.9 80 This should forward the Internet IP, port 80 to the internal machine on 192.168.5.9, port 80. What am I doing wrong here???? Anthony
Technical Details
Message-ID:
<38A7C93C.B6CC7780@c031.aone.net.au>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10669a,1b76483f642b37c2,start X-Google-Attributes: gid10669a,public X-Google-Thread: fa777,1b76483f642b37c2,start X-Google-Attributes: gidfa777,public X-Google-Thread: 102983,1b76483f642b37c2,start X-Google-Attributes: gid102983,public From: Anthony White <movielink@c031.aone.net.au> Subject: IP-Chains and external access to internal network...HELP Date: 2000/02/14 Message-ID: <38A7C93C.B6CC7780@c031.aone.net.au> X-Deja-AN: 585659464 Content-Transfer-Encoding: 7bit X-Accept-Language: en Content-Type: text/plain; charset=us-ascii X-Complaints-To: abuse@telstra.net X-Trace: vic.nntp.telstra.net 950520168 139.130.11.172 (Mon, 14 Feb 2000 20:22:48 EST) Organization: Movielink MIME-Version: 1.0 Reply-To: movielink@c031.aone.net.au NNTP-Posting-Date: Mon, 14 Feb 2000 20:22:48 EST Newsgroups: comp.os.linux.networking,aus.computers.linux,redhat.networking.general