Article View: comp.os.linux.networking
Article #163Re: IP-Chains and external access to internal network...HELP
From: timman
Date: Mon, 14 Feb 2000 00:00
Date: Mon, 14 Feb 2000 00:00
65 lines
2627 bytes
2627 bytes
Without seeing your entire firewall script I guess I can't tell you where it's being blocked. Either post the whole script or enable logging and post that or both. In article <38A7DD65.DB0D2A49@c031.aone.net.au>, movielink@c031.aone.net.au wrote: > Anthony White wrote: > > > > This is getting to much... > > Please read on...I have more info to the following. > > > > > After 17 kernel re-compiles, numerous tests, > > trial and error I can still not get people on > > the Internet onto my internal network:-((( > > > > Here is the system: > > ------------------- > > > > A standard RedHat box set up as a firewall between > > an internal network (192.168.x.x) and an Internet > > IP address, using the "PmFirewall" scripts. > > [...most snipped...] > > > The "/lib/modules/2.2.13/ipv4/ip_masq_portfw.o" file does > > exist and can be loaded - is loaded. > > > > This is the command used: > > > > /sbin/ipmasqadm portfw -f > > /sbin/ipmasqadm portfw -a -P tcp -L inet_ip_addr 80 -R 192.168.5.9 80 > > When changing the above to > > /sbin/ipmasqadm portfw -a -P tcp -L inet_ip_addr 4000 -R 192.168.5.9 > 80 > > and then point my browser to "inet_ip_addr" all works!!! > > In other words when using port 4000 to request www pages the thing gets > forwarded just fine. This means that there must be a problem with > blocking > port 80 in my IpChains rules - but where??? > > > > > This should forward the Internet IP, port 80 to the internal machine on > > 192.168.5.9, port 80. > > It does not, see above... > -- Tim Fischer MCSE,MCP+Internet COMPAQ/DEC ASE Sent via Deja.com http://www.deja.com/ Before you buy.
Technical Details
Message-ID:
<889orf$2pr$1@nnrp1.deja.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<38A7C93C.B6CC7780@c031.aone.net.au> <38A7DD65.DB0D2A49@c031.aone.net.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fa777,1b76483f642b37c2 X-Google-Attributes: gidfa777,public X-Google-Thread: 10669a,1b76483f642b37c2 X-Google-Attributes: gid10669a,public X-Google-Thread: 102983,1b76483f642b37c2 X-Google-Attributes: gid102983,public From: timman <timftafischer@my-deja.com> Subject: Re: IP-Chains and external access to internal network...HELP Date: 2000/02/14 Message-ID: <889orf$2pr$1@nnrp1.deja.com> X-Deja-AN: 585685349 References: <38A7C93C.B6CC7780@c031.aone.net.au> <38A7DD65.DB0D2A49@c031.aone.net.au> X-Http-Proxy: 1.1 x38.deja.com:80 (Squid/1.1.22) for client 63.225.132.130 Organization: Deja.com - Before you buy. X-Article-Creation-Date: Mon Feb 14 20:33:58 2000 GMT X-MyDeja-Info: XMYDJUIDtimftafischer Newsgroups: comp.os.linux.networking,aus.computers.linux,redhat.networking.general X-Http-User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)