/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! 
/* ALSO: Don't quote this header. It makes you look lame :-) */


Duke wrote:

> I need to forward port 110 from my IP Masq gateway to an internal mail
> server at 192.168.1.5.  I read the IP Masq howto, section 6.8, and it said
> to issue the following command (with my settings, of course):
> 
> ipmasqadm portfw -f
> ipmasqadm portfw -a -P tcp -L 206.172.183.107 110 -R 192.168.1.5 110
> 
> It doesn't work.  I still get my gateway's port 110 (which isn't open,
> because there's nothing running on it.)  I've tried telnetting from my
> gateway to my internal mail server on port 110 with success.  I've also
> tried to forward port 23, but I still connect to my gateway.
> I'm running Slack 7.0 with Linux kernel 2.2.15, if more info is required,
> let me know.

i think you've forgotten the ipchains masq commands that are needed before
port forwarding can work:

    ipchains -P forward DENY
    ipchains -A forward -s 192.168.1.5 -j MASQ

you need this "reverse masq" setup or port forwarding can't work.
but this shouldn't be necessary if you already have something like

    ipchains -P forward DENY
    ipchains -A forward -s 192.168.1.0/24 -j MASQ

masquerading your whole subnet.

raf

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- 
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to