[masq] Getting a machine to be able to be visable to the intenet behind the firewall

[Stephen Mills]

Hey Guys!

Just a quick question for you,

 

My IP Masqurading is working no problems, but my customer would like his mainframe to also be visiable directly on the internet but still stay behind the ip masq firewall.

 

I think the best approach would be to get an IP address for that machine that the "internet" could see....say 203.17.xxx.xxx or whatever, but how would I go about changing my below configuration so the mainframe can be directly telnetted into from the internet ? They want to remotely administor it from anywhere....

Would I have to change some of my DNS or anything else as well ??? Its on a Class B network (128.100.0.x) if this helps....

 

This is pretty much all I have in regards to current config...

 

/sbin/ipfwadm -F -p deny

/sbin/ipfwadm -F -P tcp -i deny -W ppp0 -S 128.100.0.50/16 -D 0.0.0.0/0 80 -o
/sbin/ipfwadm -F -a m -S128.100.0.50/16 -D0.0.0.0/0

 

If this not possible, Ill get them to install another phone line and hook up to another internet account directly to the mainframe....

 

Regards,

Stephen Mills.