🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.os.linux.networking
Article #160

IP-Chains and external access to internal network...HELP

#160
From: Anthony White
Date: Mon, 14 Feb 2000 00:00
47 lines
2329 bytes
This is getting to much...

After 17 kernel re-compiles, numerous tests,
trial and error I can still not get people on
the Internet onto my internal network:-(((

Here is the system:
-------------------

A standard RedHat box set up as a firewall between
an internal network (192.168.x.x) and an Internet
IP address, using the "PmFirewall" scripts.

Kernel is 2.2.13 with a lot of un-nescesary stuff
removed (SCSI support, some file systems etc.)

This works great for MASQ to the Internet from my
internal network.

Trying to get access from the Internet to a WWW server
running on one of the boxes on the internal network is
impossible!  Or so it seems.

I have recompiled the kernel more times than I care to
mention due to overlooking some of the switches to
enable "portfw" so that "ipmasqadm" could work.

Now all is set up according to the man pages but it
still will not run.

I have tried to use PING to test it, pointed a www browser
at it - nothing, no response.

The "/lib/modules/2.2.13/ipv4/ip_masq_portfw.o" file does
exist and can be loaded - is loaded.  

This is the command used:

 /sbin/ipmasqadm portfw -f
 /sbin/ipmasqadm portfw -a -P tcp -L inet_ip_addr 80 -R 192.168.5.9 80

This should forward the Internet IP, port 80 to the internal machine on
192.168.5.9, port 80.

What am I doing wrong here????

Anthony
Technical Details
Message-ID: <38A7C93C.B6CC7780@c031.aone.net.au>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10669a,1b76483f642b37c2,start
X-Google-Attributes: gid10669a,public
X-Google-Thread: fa777,1b76483f642b37c2,start
X-Google-Attributes: gidfa777,public
X-Google-Thread: 102983,1b76483f642b37c2,start
X-Google-Attributes: gid102983,public
From: Anthony White <movielink@c031.aone.net.au>
Subject: IP-Chains and external access to internal network...HELP
Date: 2000/02/14
Message-ID: <38A7C93C.B6CC7780@c031.aone.net.au>
X-Deja-AN: 585659464
Content-Transfer-Encoding: 7bit
X-Accept-Language: en
Content-Type: text/plain; charset=us-ascii
X-Complaints-To: abuse@telstra.net
X-Trace: vic.nntp.telstra.net 950520168 139.130.11.172 (Mon, 14 Feb 2000 20:22:48 EST)
Organization: Movielink
MIME-Version: 1.0
Reply-To: movielink@c031.aone.net.au
NNTP-Posting-Date: Mon, 14 Feb 2000 20:22:48 EST
Newsgroups: comp.os.linux.networking,aus.computers.linux,redhat.networking.general