alejandro,
the functionality you describe is handled by ipf's ipnat module, and more specifically by using the "rdr" directive.
packets from the outside destined for the "hidden" web and mail servers need to have their destination addresses (and perhaps ports) rewritten by the ipf box. note that there are several interactions that take place between ipf's filtering functions and ipnat's rewriting functions. it is this interaction that causes a lot of problems for some folks when exposing servers.
details on how to accomplish your goals can be found in the following links:
http://marc.theaimsgroup.com/?l=ipfilter&m=101179250803382&w=2 http://marc.theaimsgroup.com/?l=ipfilter&m=99898624628175&w=2 http://marc.theaimsgroup.com/?l=ipfilter&m=97632164522144&w=2 http://marc.theaimsgroup.com/?l=ipfilter&m=101409568515510&w=2 http://marc.theaimsgroup.com/?l=ipfilter&m=105119861622589&w=2 http://marc.theaimsgroup.com/?l=ipfilter&m=99608074705794&w=2 http://marc.theaimsgroup.com/?l=ipfilter&m=101465915228470&w=2
regards, jim
Alejandro Cabrera Obed wrote:
Hello, I have no too much experience with IPFILTER....just the packet filtering module. Now I need to know if I can use IPFILTER on a SunOS 2.5 firewall machine in order to establish a web and mail servers in two computers from my private network. In other words, I want to create a "reverse proxy" functionality.
Is it possible ????
Thanks a lot and regards !!!
Alejandro
