Subject: Re: Reach outside address+port of a NAT with port forwarding. Possible?
To: Nathan Dorfman <nathan@rtfm.net>
From: Johan Ihren <johani@autonomica.se>
List: current-users
Date: 05/02/2002 22:05:45
Nathan Dorfman <nathan@rtfm.net> writes:

> On Thu, May 02, 2002 at 07:58:30PM +0200, cube wrote:
> > Le 02 May 2002 19:52:02 +0200
> > Johan Ihren a écrit :
> > [...]
> > > rdr ep1 213.66.164.150/32 port 80 -> 192.168.1.16 port 80 tcp
> >       ^^^
> > The redirection occurs when a packet goes through ep1, which is not the
> > case when you contact the server from within the lan, or even from the NAT
> > box itself.

I realize this. As I said, I'm not really surprised by this not
working, but it would indeed be nice if it was.

> You might try duplicating the above 'rdr' line for the ep0 interface?

Good idea, but... from the inside, to the (outside) public adress:

bash# telnet 213.66.164.150 http
Trying 213.66.164.150...
[hang]

So the failure mode changes from connection refused to hang, but no cigar.

Regards,

Johan