>
> I've got a problem where I have an IPFilter box with 2 connections to the
> net, and a single internal. What I do for a particular server is redirect
> an external IP off one of the interfaces to the internal host. No problems
> there, except when a host on one of the other external networks tries to
> come in. Naturally it is routed (via the Internet) to the external IP
> address, where it is redirected to the internal host.
>
> Unfortunately, the reply from the internal host gets sent out the directly
> connected Internet interface, rather than the interface the connection came
> in on.
>
> Something like this:-
>
> MAP 192.168.150.14 80 <- -> 210.YYY.YYY.122 10027 [203.ZZZ.ZZZ.64
> 2937]]
> RDR 192.168.150.14 80 <- -> 203.XXX.XXX.5 80 [203.ZZZ.ZZZ.64
> 2937]]
>
> The RDR representing the connection coming in on interface xl1 and the MAP
> representing the outgoing connection (ie: response) going out on xl2.
>
> Basically what should be happening is the incoming connection on xl1 (ie:
> the RDR) should be all that's required, and that take care of the response
> as well. Unfortunately the routing table is getting in the way. Is there
> any other way to do this?
Can't you do this with ipnat's 'bimap' directive:
bimap 192.168.150.14/32 -> 210.YYY.YYY.122/32
?
David S.
>
