On Mon, Mar 10, 2003 at 11:42:11PM +0100, Sanne Taaij wrote:
> My goal is to connect from the internet to my FTP which is running on my 
> internal network at <internal ip>:6666. So I figured to use port redirection 
> on my FreeBSD NAT/router.Which consists of 2 nic, rl0 <public ip> and rl1 
> <internal ip>.
> ------------------
> /etc/rc.conf
> defaultrouter=<public ip adress>
> firewall_type="open"
> natd_flags="-s -u -m redirect_port tcp <internal ip>:6666 6666 redirect_port 
> udp <internal ip>:6666 6666"
> ------------------

Please forgive the obvious, but do you also have 


to make the NAT daemon start?

> I can't connect with an ftp client from one 
> of the internal ip adresses to my public adress.

That will not work.  From the internal net, you will need to ftp to <internal 
ip>:6666 directly.  NAT processes only those packets which travel via the 
external interface of your NAT/firewall box.  To test the NAT and firewall 
rules, you will have to test from a machine outside your firewall.  If you 
have access to a dial-up account, that will suffice, or perhaps you can ssh 
to a shell account on another machine, and then try to ftp back to your
public IP.

I would suggest you test first from the internal LAN to ensure that you can 
ftp on port 6666 to the internal IP of your ftp server.  This will show
you whether the ftp server itself is working as you think it should.  Once 
you know the ftp works on the internal LAN, then you can test from a machine 
_outside the firewall_ to get the natd redirection happening.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message

Reply via email to