Nat problem, nat and proxy_address at the same time.

From: Juhani Tali (juhani_at_kernel.ee)
Date: 09/27/04

  • Next message: Jon Noack: "Re: Strange things on GBit / 1000->100 / net.inet.tcp.sack"
    Date: Mon, 27 Sep 2004 16:26:21 +0300
    To: freebsd-net@freebsd.org
    
    

    Hi

    I am trying to use in Linux terminology "SNAT" and "DNAT" at the same time.

    The result should be: client 192.168.1.9 sees instead of remote web
    server 96.98 a remote (routed) web server 240.17

    natd -port 8675 -alias_address 212.27.241.3 -proxy_rule port 80 server
    212.27.240.17:80
    ipfw add 125 divert 8675 ip from 192.168.1.9 to 194.106.96.98
    ipfw add 126 divert 8675 ip from 212.27.240.17 to any

    In the gw, tcpdump shows me
    on the external interface traffic both ways, to and from 240.17 (the
    "new" web server)
    on the internal interface traffic only outgoing traffic towards 96.98

    ipfw show
    00125 102 5064 divert 8675 ip from 192.168.1.9 to 194.106.96.98
    00126 36 2096 divert 8675 ip from 212.27.240.17 to any
    So it seems that these (testing only) rules do get traffic and the
    problem is in nat.

    What might be the problem?

    Juhani
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"


  • Next message: Jon Noack: "Re: Strange things on GBit / 1000->100 / net.inet.tcp.sack"

    Relevant Pages

    • Re: What is ipfw telling me ?
      ... > the ipfw is on 10.0.0.2 and does not have a web server. ... and destination addresses of a TCP or UDP packet as saddr:sport daddr:dport. ... is trying to reach port 80 on 10.0.0.1. ...
      (FreeBSD-Security)
    • Re: remote directory lookup
      ... Josh wrote: ... > a remote web server. ... > For example if i do a Server.MapPathprocess on my web server I get ... It would be a security bug if I could find out the physical location. ...
      (microsoft.public.dotnet.framework.aspnet)
    • [ipfw] Dynamic rules grow indefinitely..
      ... It is a web server with ~130req/s, ... To reset them I was forced to flush and reload all rules.. ... Kernel config: http://pastebin.ca/273077 ... Also I get lots of 0s in ipfw -d list ...
      (freebsd-stable)
    • Re: remote & exchange URLs dont work!! (DNS error maybe?)
      ... - problem with site's securty certificate ... > Just installed a fresh copy of SBS 2K3, and I can't make remote WEB based ... > served by an external web server). ... > I can display the SBS website using www.domain.org, ...
      (microsoft.public.win2000.dns)
    • Re: remote & exchange URLs dont work!! (DNS error maybe?)
      ... - problem with site's securty certificate ... > Just installed a fresh copy of SBS 2K3, and I can't make remote WEB based ... > served by an external web server). ... > I can display the SBS website using www.domain.org, ...
      (microsoft.public.windows.server.sbs)