/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
Hi list,
I have a question on allowing internal masq'd machines to access port
forwarded internal machines the same way the rest of the world does.
Presently, I can setup a ipmasqadm portfw connection and anyone outside
my masq'd net can access it via my firewall's external IP and the specific
port. However, my internal machines cannot -- if they go to the external
IP on the specified forwarding port, they just time out.
My ipchains rules are simple: (eth0 is internal, eth1 is external)
/sbin/ipchains -M -S 7200 10 360
/sbin/ipchains -F input
/sbin/ipchains -F output
/sbin/ipchains -F forward
/sbin/ipchains -A input -j ACCEPT -i eth1 -s 0/0 67 -d 0/0 68 -p udp
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 10.3.2.0/24 -j MASQ
The ipmasqadm commands are:
ipmasqadm portfw -a -P tcp -L 24.x.x.x 2047 -R 10.3.2.6 2047
So what am I missing? Where are these packets getting denied, and
more importantly, how can I fix this?
Thanks,
Dave
(Oh, and considering I only get the list in digest form, please cc any
replies directly to me at [EMAIL PROTECTED] - Thanks!)
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
