On Tue, 12 Sep 2000, EXT Tony Nugent wrote:
>   [ NB: kernel 2.2.16 (both customised and "stock RH distro") ]
> 
> I need to do some port forwarding on a router (actually, several)
> for a specific (any?) purpose.  IE, connect (or redirect) to
> a port on that box, and you will be connected to some port on
> another box.
> 
> It seems that I have a few options... aproxy (found on freshmeat)
> mostly works - admin/monitor modes don't do it for me, and it isn't
> quite what I need anyway.  (Or want... user-space perl daemon?  I'd
> rather it occur closer to kernel space, eg, at the level of
> ipchains/routing).

xinetd (http://www.synack.net/xinetd/) can also do this (and tons of other
interesting stuff too)

> 
> I've had a look at the ipmasqadm tools, used with the kernel port
> forwarding modules.  No luck at all with this approach.  What
> worries me is that ipmasqadm appears to be two years old.

I got ssh working very easily with ipmasqadm, ftp almost worked but I
never bothered to really check.. something like
ipmasqadm portfw -a -P tcp -L aaa.bbb.ccc.ddd -R 192.168.1.20 22
(where aa.bb is the ip-address of your external interface) to forward ssh
connections from internet to another box behind the firewall.

Ipmasqadm is of version 0.4.2-3 but I'm not sure where I dug that rpm
from. I can send it to you if you can't find a newer one anywhere..

> 
> So can anyone tell me what the real story is here?  How can I
> achieve this?
> 
> (Will this work with a "stock" rh kernel?  They don't have much of
> the "advanced" routing features compiled into them).

Works for me with stock RH 6.1 & 6.2 kernels.

> 
> When the 2.4.x kernels arrive, will ipmasqadm become obselete?  Is
> ipmasqadm obsolete already with the 2.2.x series?
> 
> Or should I (and can I) do this with the iproute tools instead?

Hmm.. dunno if ipmasqadm is obsolete but at least it works ok with 2.2.x
and the kernel doesn't complain or anything. 2.4 is a different story I'd
suppose though can't say that I'm sure :)

        - Panu -

> 
> Many thanks.  Any answers that point me in the right direction could
> save me heaps of time and frustration...
> 
> Cheers
> Tony
>  -=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-
>   Tony Nugent <[EMAIL PROTECTED]>    Systems Administrator, RHCE
>   GrowZone OnLine       (a project of) GrowZone Development Network
>   PO Box 475 Toowoomba Oueensland Australia 4350   Ph: 07 4637 8322
>  -=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-
> 
> 
> 
> _______________________________________________
> Redhat-devel-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-devel-list
> 




_______________________________________________
Redhat-devel-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-devel-list

Reply via email to