Hello all,
      I am trying to do something a bit complicating and was wondering if
some of you had tried this is in the past or had any tips. First off
ipfilter has been wonderful, helpful and is a great tool. Now to the
issue/problem I am having. We are running a couple zones on a T2000 one
zone with a world access IP address ie. 147.9.X.X. We then want to create a
separate zone on a private subnet ie. 192.168.1.2  which currently does not
have any world access. What I would like and am trying to do is take
ipfilter/ipnat and use RDR to redirect 2 ports from Global zone to Zone B.
I have tried the configuration bellow but have not been successful.  Any
help would be appreciated and is this even possible.  We are running
ipfilter/ipnat that came with Solaris 10.

Global = 147.9.X.X e1000g1
Zone A = 147.9.X.X e1000g1:1
ZoneB = 192.168.1.2 e1000g1:2


ipnat.conf on the Global zone.

# forward from a public port to a private zone port
 rdr eg1000g1 147.9.X.X port 2222 -> 192.168.1.2 port 22

# allow any 192.168.1.x zone to use the internet
map eg1000g1 192.168.1.0/24 -> 0/32
map eg1000g1 192.168.1.0/24 -> 0/32
map eg1000g1 192.168.1.0/24 -> 0/32

ipfilter.conf on Global zone.

# IP Filter rules syntax.
# Testing purposes
pass in quick log on e1000g1 from any to any


Luiz Casey
Office: (202) 885-2692
Cell: (202) 403-1209
[EMAIL PROTECTED]

Reply via email to