Hi James!

> I am using EigersteinB2, dynamic IP, on a Cox@home cable modem. The box is 
> a Pentium 120, 32 megs of RAM. I have another Linux box on the internal 
> network at 192.168.1.210, that runs an IMAP server, and serves as a file 
> server (Samba) for our Windows machines. The firewall/IP masquerading all 
> seems to be working perfectly, with just one exception.
>
> Using the original Eigerstein, with a static IP address from Cox, I had no 
> problem forwarding both SSH and IMAP through the firewall box to the 
> internal server at 192.168.1.210 mentioned above.

The problem, if it's what I think it is and I'm quite sure it is would only show up
with a dymanic IP...

> Using the stock EigersteinB2 image, modifying /etc/network.conf to forward 
> SSH from external machines through the firewall to the internal server at 
> 192.168.1.210 seems to work properly, but when I uncomment (and correct the 
> internal IP) on the line to forward IMAP, and add either "0/0_imap" or 
> "0/0_imap2" to the line defining external TCP ports, and then reboot, I get 
> the following error message. The message comes on the line immediately 
> after the "DHPACK from 209.219.23.193"

> It says: "IP filters: portfw: illegal local address/port specified"

The problem is not with the port it's with the (EXTERNAL) IP address... When that part 
of
the scripts run, EXTERN_IP is not defined, the command being incomplete the port 
forwarding
command fails in this way...

With a static IP address EXTERN_IP is always defined so you would not have this 
problem...

> Am I forgetting to do something else in network.conf or somewhere else?

I don't use DHCP (I have PPPOE... )-; ) and my scripts have been somewhat tweaked so I 
can't be
sure but have you set EXTERN_DHCP to YES? Setting it to YES will fetch the IP address 
of the
external interface and store it in EXTERN_IP so it should (EXTERN_IP) be defined when 
the
port forwarding rules are executed...

Good luck!

Nicolas Riendeau

PS: Please forgive my English as it is not my mother tongue. Thanks!

_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to