Redirect with IPFilter on Solaris 9

Dear managers,

I am trying to realize port forwarding with IPFIlter on a machine with
one external (public ipaddress) and one internal (192.168.1.1)
interface. I would like to telnet into a machine in the LAN by using

telnet <public ipaddress of ipfilter machine> <someport>

For this I added (hme0 is the external interface of the Solaris machine)

rdr hme0 0/0 port <someport> -> 192.168.1.11 port 23 tcp

to /etc/opt/ipf/ipnat.conf and reloaded the rules with
/etc/init.d/ipfboot reload. When I try to connect I get

telnet <public ipaddress of ipfilter machine> <someport>

Trying <public ipaddress of ipfilter machine>...
telnet: connect to address <public ipaddress of ipfilter machine>:
Connection refused

All google results tell me that my rule should work, but it doesn't.
What am I missing?

Thanks a lot!

Regards,

Andreas
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers

Relevant Pages

  • Re: ipfilter not filtering?
    ... Eric Enright writes: ... >> Is this a sun driver? ... >> I had a similar problem with ppp and ipfilter, ... > Output of plumbing the interface and then configuring it via DHCP: ...
    (comp.unix.solaris)
  • Re: routing problem
    ... seem to like it a lot - and I use ipfw because I know how to. ... The ipfilter was nating, but I'm not sure about the NAT rules inside the ... temporary firewall rules to log everything in and out per interface .. ... it to static and cloned routing, but taking it out of the mix might help ...
    (freebsd-questions)
  • Re: network routing with dual interfaces.
    ... is the IP of the default router for the qfeN subnet ... is the IP assigned to the qfeN interface ... re-routed packets don't go out on the wire unless the ... > I may try a newer ipfilter. ...
    (comp.unix.solaris)
  • Re: Ipfilter under solaris10 problemg
    ... Network card name is bge0. ... IPFilter does not apply rules when network interfaces are ... But since you are using bge0, I assume this interface is your primary ...
    (comp.unix.solaris)