You cannot do this with just ipchains. You need some sort of port 
forwarding if you are interested in directly telneting to the machine
10.1.1.5. Since the address 10.1.1.5 is private address, it cannot be 
routed on the internet.

So you will need to have additional package called ipmasqadm. You can 
setup a rule like 

ipmasqadm autofw -A -r tcp 10000 23 -h 10.1.1.5 

on 10.1.1.11 machine. So all the incoming conncetions on port 10000
get forwarded to port 23 of 10.1.1.5. So now you can telnet from
internet 10 a.b.c.d on port 10000 and it will get forwarded automatically
to 10.1.1.5.

Or else you always have the option of telneting to a.b.c.d and then 
to 10.1.1.5.


Amitay.

On Thu, Feb 24, 2000 at 10:54:06PM +0530, wilson wrote:
> hi,
>     I am implenting linux firewall (RedHat 6.0) . I have two NIC , one
> having a public internet ip address        a.b.c.d         and the other
> having  private ip address      10.1.1.11
> 
> My aim is to telnet to ip address          10.1.1.5              from
> the internet.
> 
> So I have to configure that when  I telnet to
> a.b.c.d          from the internet,  the linux firewall should send the
> request to        10.1.1.5
> 
> ______                                                     ______
> ------------------||             ||-----------------||            ||
>   INTERNET              a.b.c.d  ||             ||
> 10.1.1.11                10.1.1.5  ||            ||
>                                                       ||_____
> ||                                                   ||_____ ||
> 
> 
> what is the ipchain rule from implementing this  ?
> 
> thanks.
> 
> To subscribe / unsubscribe goto the site www.ilug-bom.org ., click on the mailing 
>list button and fill the appropriate information 
> and submit. For any other queries contact the ML maintener

Amitay.
-- 

Behold the turtle. He makes progress only when he sticks his neck out. 

To subscribe / unsubscribe goto the site www.ilug-bom.org ., click on the mailing list 
button and fill the appropriate information 
and submit. For any other queries contact the ML maintener

Reply via email to