On Mon, 3 Jan 2000, Philippe Moutarlier wrote:

I've been experimenting with the ipfwadm package.  Docs imply that it's
the corrrect tool, but it generates nothing but complaints here.  Support 
for it seems to have gone away with kernel 2.1.   I find no docs that
apply to the 2.2 kernel and the ipfwadm file that comes with the 2.2
kernel rpms is in fact a wrapper for ipchains.

I got the brilliant idea this morning to studdy that file - it may give
some clues, but I'm still digging.

Thanks for the response.

> 
> for forwarding specific port access you might be better off using ipmasqadm package.
> 
> I cannot tell you exactly where to look for it but here would be the trick
> 
> 
> /usr/sbin/ipmasqadm portfw -a -P tcp -L 24.92.01.01 80 -R 192.168.0.1 80
> 
> assuming you external connection on 24.92.01.01 (fake, of course) and your 
> internal webserver on priovate ip 192.168.0.1 with web connection on port 80
> 
> Philippe
>  
> 
> 
> [EMAIL PROTECTED] writes:
> 
> > I'm building a box to act as a firewall.  I intend to set up a webserver
> > on a second box behind that firewall, so I need to forward packets from
> > the exterior connection to the inside.
> > 
> > Docs say you can do this with ipchains.  I've done this using and earlier
> > kernel and snat, but I can't find any docs that cover it for ipchains...
> > frustrating.  The ipchains howto doesn't give it.  I've got the kernel
> > configured, but all the docs talk about masquerading and fall short of a
> > simple explanation of how to translate the packets on the exterior
> > interface to the ip address/port on the inside interface. 
> > 
> > Evidently, the actual setting up of packet forwarding must require another
> > tool. 
> > 
> > Anyone know where this is documented?  What tool is needed? 
> > 
> > Maybe a simple example?  I'm getting tired of trying to do this by
> > experiment. 
> > 
> > Any help would be appreciated. 
> > 
> > Thanks. 
> > 
> > 
> > 
> > 
> > -- 
> > To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
> > as the Subject.
> 
> 
> -- 
> To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
> as the Subject.
> 


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to