/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
> Thanks
>
>
> these are the interesting parts of the script
>
> NAT_IP="200.25.238.74" # NAT IP address
> OUTSIDE_IP="200.25.238.74" # External interface
> NOTES_SERVER=199.255.255.240 # Lotus Notes server
> LOCALNET_1="199.255.255.0/24" # Internal Network
> UNPRIVPORTS="1024:65535"
> # Set the default policy of the filter to deny in order to have open the
> firewall .
>
> ipchains -P input ACCEPT
> ipchains -P output ACCEPT
> ipchains -P forward ACCEPT
>
> #Forward Services to Internal LOTUS Server
> echo "Forwarding Needed Services"
>
> ipmasqadm portfw -f
>
> ipmasqadm portfw -a -P tcp -L $NAT_IP 25 -R $NOTES_SERVER 25
> ipmasqadm portfw -a -P tcp -L $NAT_IP 80 -R $NOTES_SERVER 80
> ipmasqadm portfw -a -P tcp -L $NAT_IP 443 -R $NOTES_SERVER 443
> ipmasqadm portfw -a -P tcp -L $NAT_IP 110 -R $NOTES_SERVER 110
> ipmasqadm portfw -a -P tcp -L $NAT_IP 1352 -R $NOTES_SERVER 1352
> ipmasqadm portfw -a -P tcp -L $NAT_IP 1352 -R $NOTES_SERVER 1352
>
ipmasqadm portfw -a -P tcp -L $NAT_IP UNPRIVPORTS -R $NOTES_SERVER UNPRIVPORTS
> I have another question, could i do NAT with ipmasqadm, because i could see that
> what i do when I use portfw is PAT but I don4t know what to do when I don4t want
> to map an specific port, but I want to map all portsfrom a server.
>
> for example in a CISCO router I do NAT with this line.
>
> ip nat inside source static tcp externeal_address internal_address
>
> in this case I could use any valid ip for external_address, but in ipmasadm i
> have seeing I have to use the same ip of the firewall external interface, is it
> not dangerous?
>
> thank you very much
>
> Cris
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
