🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.os.linux.networking
Article #163

Re: IP-Chains and external access to internal network...HELP

#163
From: timman
Date: Mon, 14 Feb 2000 00:00
65 lines
2627 bytes
Without seeing your entire firewall script I guess I can't tell you
where it's being blocked.  Either post the whole script or enable
logging and post that or both.

In article <38A7DD65.DB0D2A49@c031.aone.net.au>,
  movielink@c031.aone.net.au wrote:
> Anthony White wrote:
> >
> > This is getting to much...
>
> Please read on...I have more info to the following.
>
> >
> > After 17 kernel re-compiles, numerous tests,
> > trial and error I can still not get people on
> > the Internet onto my internal network:-(((
> >
> > Here is the system:
> > -------------------
> >
> > A standard RedHat box set up as a firewall between
> > an internal network (192.168.x.x) and an Internet
> > IP address, using the "PmFirewall" scripts.
>
> [...most snipped...]
>
> > The "/lib/modules/2.2.13/ipv4/ip_masq_portfw.o" file does
> > exist and can be loaded - is loaded.
> >
> > This is the command used:
> >
> >  /sbin/ipmasqadm portfw -f
> >  /sbin/ipmasqadm portfw -a -P tcp -L inet_ip_addr 80 -R 192.168.5.9
80
>
> When changing the above to
>
>    /sbin/ipmasqadm portfw -a -P tcp -L inet_ip_addr 4000 -R
192.168.5.9
> 80
>
>  and then point my browser to "inet_ip_addr" all works!!!
>
> In other words when using port 4000 to request www pages the thing
gets
> forwarded just fine.  This means that there must be a problem with
> blocking
> port 80 in my IpChains rules - but where???
>
> >
> > This should forward the Internet IP, port 80 to the internal
machine on
> > 192.168.5.9, port 80.
>
> It does not, see above...
>

--
Tim Fischer
MCSE,MCP+Internet
COMPAQ/DEC ASE


Sent via Deja.com http://www.deja.com/
Before you buy.
Technical Details
Message-ID: <889orf$2pr$1@nnrp1.deja.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <38A7C93C.B6CC7780@c031.aone.net.au> <38A7DD65.DB0D2A49@c031.aone.net.au>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fa777,1b76483f642b37c2
X-Google-Attributes: gidfa777,public
X-Google-Thread: 10669a,1b76483f642b37c2
X-Google-Attributes: gid10669a,public
X-Google-Thread: 102983,1b76483f642b37c2
X-Google-Attributes: gid102983,public
From: timman <timftafischer@my-deja.com>
Subject: Re: IP-Chains and external access to internal network...HELP
Date: 2000/02/14
Message-ID: <889orf$2pr$1@nnrp1.deja.com>
X-Deja-AN: 585685349
References: <38A7C93C.B6CC7780@c031.aone.net.au> <38A7DD65.DB0D2A49@c031.aone.net.au>
X-Http-Proxy: 1.1 x38.deja.com:80 (Squid/1.1.22) for client 63.225.132.130
Organization: Deja.com - Before you buy.
X-Article-Creation-Date: Mon Feb 14 20:33:58 2000 GMT
X-MyDeja-Info: XMYDJUIDtimftafischer
Newsgroups: comp.os.linux.networking,aus.computers.linux,redhat.networking.general
X-Http-User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)