--------------070600050603090905020906
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Added:
ACCEPT gbl loc:192.168.0.2 tcp 4899 (mistype lasttime) -
and it worked.
Now just to get RAdmin to work right with NT Authentication.
Thanks guys
Tom Eastep wrote:
--On Wednesday, November 13, 2002 01:54:00 PM +0200 SHOREWALL TimeLord
<mailto:shorewall@timelord.sk> <shorewall@timelord.sk> wrote:
Nigel George (13.11.2002 12:24):
Hi,
I''m trying to get RAdmin [uses tcp 4889] access to my Windows machine
which is behind my firewall.
I have zones:
gbl : the world
loc : my lan
fw : firewall
I placed the following in my rules file
DNAT gbl loc:192.168.0.2 tcp 4889 -
When trying to RAdmin I get a cannot conect to server error.
192.168.0.2 is my Windows Machines IP address.
Can anyone help me?
DNAT gbl loc:192.168.0.2 tcp 4889 -
123.123. 123.123
where 123.123.123.123 is external IP of your firewall
If DETECT_DNAT_IPADDRS=Yes in shorewall.conf, then this rule is
equivalent to the original poster''s rule.
-Tom
--
Tom Eastep \ Shorewall - iptables made easy
AIM: tmeastep \ http://shorewall.sf.net <http://shorewall.sf.net>
ICQ: #60745924 \ teastep@shorewall.net <mailto:teastep@shorewall.net>
_______________________________________________
Shorewall-users mailing list
Shorewall-users@shorewall.net <mailto:Shorewall-users@shorewall.net>
http://www.shorewall.net/mailman/listinfo/shorewall-users
<http://www.shorewall.net/mailman/listinfo/shorewall-users>
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Nigel George
Webmaster
CPiO Limited
Telephone : +44 (0) 1675 467046
Facsimile : +44 (0) 1675 467682
E-Mail : mailto:nigel.george@cpio.co.uk
<mailto:nigel.george@cpio.co.uk>
Web : http://www.cpio.co.uk/ <http://www.cpio.co.uk/>
The views expressed within this message are those of the sender, not
those of the company unless endorsed by a Director of CPiO Limited.
--------------070600050603090905020906
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title></title>
</head>
<body>
Added:<br>
<br>
ACCEPT gbl
loc:192.168.0.2 tcp
4899 (mistype lasttime) -<br>
<br>
and it worked.<br>
<br>
Now just to get RAdmin to work right with NT Authentication.<br>
<br>
Thanks guys<br>
<br>
Tom Eastep wrote:<br>
<blockquote type="cite"
cite="mid24970000.1037197640@wookie.shorewall.net"> <br>
<br>
--On Wednesday, November 13, 2002 01:54:00 PM +0200 SHOREWALL TimeLord
<a class="moz-txt-link-rfc2396E"
href="mailto:shorewall@timelord.sk"><shorewall@timelord.sk></a>
wrote: <br>
<br>
<blockquote type="cite">Nigel George
(13.11.2002 12:24): <br>
<blockquote type="cite">Hi, <br>
I''m trying to get RAdmin [uses tcp 4889] access to my Windows machine
<br>
which is behind my firewall. <br>
<br>
I have zones: <br>
<br>
gbl : the world <br>
loc : my lan <br>
fw : firewall <br>
<br>
I placed the following in my rules file <br>
<br>
DNAT gbl
loc:192.168.0.2
tcp 4889 - <br>
<br>
When trying to RAdmin I get a cannot conect to server error. <br>
<br>
192.168.0.2 is my Windows Machines IP address. <br>
<br>
Can anyone help me? <br>
</blockquote>
<br>
<br>
<br>
DNAT gbl
loc:192.168.0.2
tcp
4889 - <br>
123.123. 123.123 <br>
<br>
where 123.123.123.123 is external IP of your firewall <br>
<br>
</blockquote>
<br>
If DETECT_DNAT_IPADDRS=Yes in shorewall.conf, then this rule is
equivalent to the original poster''s rule. <br>
<br>
-Tom <br>
-- <br>
Tom Eastep \ Shorewall - iptables made easy
<br>
AIM: tmeastep \ <a class="moz-txt-link-freetext"
href="http://shorewall.sf.net">http://shorewall.sf.net</a>
<br>
ICQ: #60745924 \ <a class="moz-txt-link-abbreviated"
href="mailto:teastep@shorewall.net">teastep@shorewall.net</a>
<br>
<br>
_______________________________________________ <br>
Shorewall-users mailing list <br>
<a class="moz-txt-link-abbreviated"
href="mailto:Shorewall-users@shorewall.net">Shorewall-users@shorewall.net</a>
<br>
<a class="moz-txt-link-freetext"
href="http://www.shorewall.net/mailman/listinfo/shorewall-users">http://www.shorewall.net/mailman/listinfo/shorewall-users</a>
<br>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="MS Exchange Server version
5.5.2788.0">
<title></title>
<p><font size="2"
face="Arial">~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</font>
<br>
<font size="2" face="Arial">Nigel George<br>
Webmaster<br>
CPiO Limited<br>
<br>
Telephone : +44 (0) 1675 467046<br>
Facsimile : +44 (0) 1675 467682<br>
E-Mail : <a
href="mailto:nigel.george@cpio.co.uk">mailto:nigel.george@cpio.co.uk</a><br>
Web :
<a
href="http://www.cpio.co.uk/"
target="_blank">http://www.cpio.co.uk/</a><br>
<br>
The views expressed within this message are those of the sender, not<br>
those of the company unless endorsed by a Director of CPiO Limited.</font>
</p>
</div>
</body>
</html>
--------------070600050603090905020906--