Subject: Re: Need help on rdr / IPNAT
To: None <netbsd-help@netbsd.org>
From: Henry Nelson <henry@irm.nara.kindai.ac.jp>
List: netbsd-help
Date: 12/12/2000 11:18:24
> I have the firewall running on NetBSD 1.4.2 which is pre-configured by
> http://www.dubbele.com . Thanks to dubbele techs for that.
"Pre-configured" means that you must understand and consistently use
the configuration that is installed. For me that was more difficult
than just installing my own configuration from scratch.
> rdr ne2 XX.XX.XX.XX/32 port 80 -> 192.168.1.104 port 8080 tcp
^^ ^^^^
Try "rdr ne2 XX.XX.XX.XX/0 port 80 -> 192.168.1.104 port 80 tcp".
Changing that "/32" to "/0" is what got me going. (See below about 8080.)
Please, can anyone explain why that must be "/0" and not "/32"? TIA.
> gateway_enable=3D"YES"
I hope these "=3D" are only an artifact of your mailer. In the respective
rc.* files they must be ascii "=".
> I am not sure that how do i make sure that port 80 on firewall m/c is =
> open.
> I checked /etc/services , line for port 80 is not commented.
But you have port 8080 set to receive http redirection. I have port 80
set in ipnat.conf, so the default in /etc/services is not affected. If
you really want to use 8080 for your server or a web proxy, then you'll
have to set up something to listen on that port and have it listed in
/etc/services, AFAIK.
Hope it helps.
henry nelson