/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
I'm not sure why the port-forwarding doesn't work...but I've always had the
best luck with marking(mfw). I have a similar setup to yours, different
app...same concept tho. Here's how I do it. (From memory, so I may get a few
syntax things wrong...but you can figure it out :P)
ipmasqadm mfw -A -m 1 -P tcp -r <internal ip> <tcp port>
ipmasqadm mfw -A -m 2 -P udp -r <internal ip> <udp port>
ipchains -I (that's ucase i) input -p tcp -y -i eth0 -d <ext-ip> <tcp port>
-m 1
ipchains -I input -p udp -i eth0 -d <ext-ip> <udp port> -m 2
This way, you can also specify by source ip so you can have different
callers go to different machines and whatnot. I've heard from various Linux
admins that this is the most effecient way to do it anyways...any disputes
on that anyone? could be wrong. Hope this helps.
Tom Steele
IT Support
Children's Hospital
> -----Original Message-----
> From: Jake Colman [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, January 17, 2000 12:36 PM
> To: [EMAIL PROTECTED]
> Subject: [Masq] Port Forwarding Problem (or help with dialpad)
>
> /* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
> */
>
>
> I am trying to use dialpad.com and have followed the instructions for
> making
> it work over a firewall. Essentially, I have to open udp ports 51200 and
> 51201 and tcp port 51210 and redirect them to one of my internally masqed
> PCs. I am using the TrinityOS strong ruleset and have everything else
> about
> my network working fine.
>
> I added the following port forwarding commands to my system:
>
> ipmasqdm portfw -f
> ipmasqdm portfw -a -P tcp -L <firewall IP> 51210 -R <internal PC IP> 51210
> ipmasqdm portfw -a -P upd -L <firewall IP> 51201 -R <internal PC IP> 51201
> ipmasqdm portfw -a -P upd -L <firewall IP> 51200 -R <internal PC IP> 51200
>
> Do I also need to do something in my firewall rules to allow access to
> these
> ports? This alone does not seem to do the trick?
>
>
> --
> Jake Colman
>
> Principia Partners LLC Phone: (201) 946-0300
> Harborside Financial Center Fax: (201) 946-0320
> 902 Plaza II Beeper: (800) 505-2795
> Jersey City, NJ 07311 E-mail: [EMAIL PROTECTED]
> E-mail: [EMAIL PROTECTED]
> web: http://www.ppllc.com
>
> "Every time I think I've idiot-proofed something someone comes up with a
> better idiot"
>
> _______________________________________________
> Masq maillist - [EMAIL PROTECTED]
> Admin requests can be handled at http://www.indyramp.com/masq-list/ --
> THIS INCLUDES UNSUBSCRIBING!
> or email to [EMAIL PROTECTED]
>
> PLEASE read the HOWTO and search the archives before posting.
> You can start your search at http://www.indyramp.com/masq/
> Please keep general linux/unix/pc/internet questions off the list.
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
