[Shorewall-users] IP Forwarding

Nigel George
Wed, 13 Nov 2002 14:30:22 -0000

--------------070600050603090905020906
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Added:

ACCEPT    gbl    loc:192.168.0.2    tcp    4899 (mistype lasttime)    -

and it worked.

Now just to get RAdmin to work right with NT Authentication.

Thanks guys

Tom Eastep wrote:




--On Wednesday, November 13, 2002 01:54:00 PM +0200 SHOREWALL TimeLord
<mailto:shorewall@timelord.sk> <shorewall@timelord.sk> wrote:



Nigel George  (13.11.2002  12:24):


Hi,
I''m trying to get RAdmin [uses tcp 4889] access to my Windows machine
which is behind my firewall.

I have zones:

gbl : the world
loc : my lan
fw : firewall

I placed the following in my rules file

DNAT  gbl    loc:192.168.0.2      tcp    4889   -

When trying to RAdmin I get a cannot conect to server error.

192.168.0.2 is my Windows Machines IP address.

Can anyone help me?





DNAT   gbl     loc:192.168.0.2       tcp     4889      -
123.123. 123.123

where 123.123.123.123 is external IP of your firewall




If DETECT_DNAT_IPADDRS=Yes in shorewall.conf, then this rule is
equivalent to the original poster''s rule.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://shorewall.sf.net <http://shorewall.sf.net>
ICQ: #60745924  \ teastep@shorewall.net <mailto:teastep@shorewall.net>

_______________________________________________
Shorewall-users mailing list
Shorewall-users@shorewall.net <mailto:Shorewall-users@shorewall.net>
http://www.shorewall.net/mailman/listinfo/shorewall-users
<http://www.shorewall.net/mailman/listinfo/shorewall-users>



--


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Nigel George
Webmaster
CPiO Limited

Telephone :     +44 (0) 1675 467046
Facsimile :     +44 (0) 1675 467682
E-Mail :        mailto:nigel.george@cpio.co.uk
<mailto:nigel.george@cpio.co.uk>
Web :           http://www.cpio.co.uk/ <http://www.cpio.co.uk/>

The views expressed within this message are those of the sender, not
those of the company unless endorsed by a Director of CPiO Limited.


--------------070600050603090905020906
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit








Added:

ACCEPT&nbsp;&nbsp;&nbsp; gbl&nbsp;&nbsp;&nbsp;
loc:192.168.0.2&nbsp;&nbsp;&nbsp; tcp&nbsp;&nbsp;&nbsp;
4899 (mistype lasttime) -

and it worked.

Now just to get RAdmin to work right with NT Authentication.

Thanks guys

Tom Eastep wrote:
<blockquote type="cite"
cite="mid24970000.1037197640@wookie.shorewall.net">

--On Wednesday, November 13, 2002 01:54:00 PM +0200 SHOREWALL TimeLord
<a class="moz-txt-link-rfc2396E"
href="mailto:shorewall@timelord.sk"><shorewall@timelord.sk>
wrote:

Nigel George
(13.11.2002 12:24):
Hi,
I''m trying to get RAdmin [uses tcp 4889] access to my Windows machine

which is behind my firewall.

I have zones:

gbl : the world
loc : my lan
fw : firewall

I placed the following in my rules file

DNAT&nbsp; gbl&nbsp;&nbsp;&nbsp;
loc:192.168.0.2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
tcp 4889 -

When trying to RAdmin I get a cannot conect to server error.

192.168.0.2 is my Windows Machines IP address.

Can anyone help me?




DNAT&nbsp;&nbsp; gbl&nbsp;&nbsp;&nbsp;&nbsp;
loc:192.168.0.2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
tcp&nbsp;&nbsp;&nbsp;&nbsp;
4889 -
123.123. 123.123

where 123.123.123.123 is external IP of your firewall



If DETECT_DNAT_IPADDRS=Yes in shorewall.conf, then this rule is
equivalent to the original poster''s rule.

-Tom
--
Tom Eastep&nbsp;&nbsp;&nbsp; \ Shorewall - iptables made easy

AIM: tmeastep&nbsp; \ <a class="moz-txt-link-freetext"
href="http://shorewall.sf.net">http://shorewall.sf.net

ICQ: #60745924&nbsp; \ <a class="moz-txt-link-abbreviated"
href="mailto:teastep@shorewall.net">teastep@shorewall.net


_______________________________________________
Shorewall-users mailing list
<a class="moz-txt-link-abbreviated"
href="mailto:Shorewall-users@shorewall.net">Shorewall-users@shorewall.net

<a class="moz-txt-link-freetext"
href="http://www.shorewall.net/mailman/listinfo/shorewall-users">http://www.shorewall.net/mailman/listinfo/shorewall-users



--

<meta name="Generator" content="MS Exchange Server version
5.5.2788.0">

<font size="2"
face="Arial">~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Nigel George
Webmaster
CPiO Limited

Telephone : +44 (0) 1675 467046
Facsimile : +44 (0) 1675 467682
E-Mail : &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <a
href="mailto:nigel.george@cpio.co.uk">mailto:nigel.george@cpio.co.uk
Web : &nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <a
href="http://www.cpio.co.uk/"
target="_blank">http://www.cpio.co.uk/

The views expressed within this message are those of the sender, not
those of the company unless endorsed by a Director of CPiO Limited.





--------------070600050603090905020906--