Problems with RDR & NAT...

[Warren Welch]

Hi all,

I've got a problem where I have an IPFilter box with 2 connections to the net, and a single internal. What I do for a particular server is redirect an external IP off one of the interfaces to the internal host. No problems there, except when a host on one of the other external networks tries to come in. Naturally it is routed (via the Internet) to the external IP address, where it is redirected to the internal host.

Unfortunately, the reply from the internal host gets sent out the directly connected Internet interface, rather than the interface the connection came in on.

Something like this:-

MAP 192.168.150.14 80 <- -> 210.YYY.YYY.122 10027 [203.ZZZ.ZZZ.64 2937]]
RDR 192.168.150.14 80 <- -> 203.XXX.XXX.5 80 [203.ZZZ.ZZZ.64 2937]]

The RDR representing the connection coming in on interface xl1 and the MAP representing the outgoing connection (ie: response) going out on xl2.

Basically what should be happening is the incoming connection on xl1 (ie: the RDR) should be all that's required, and that take care of the response as well. Unfortunately the routing table is getting in the way. Is there any other way to do this?

I asked a similar question several months ago, without any responses... Hoping for something a little better this time round... If needs I can create some sort of diagram indicating how it's all held together.

I'm currently using FreeBSD 4.7 with IPFilter 3.4.30 ...

Thanks in advance,

Warren
[EMAIL PROTECTED]