Shorewall users - Mar 2006 - DNAT with a single Interface

I  have a single interface configuration of the Shorewall Firewall.
  We are trying to forward a simple ssh connection from port 9999 on our 
firewall to another computer on the same interface.  In another connection, 
we are trying to forward a tcp connection out to another computer (and port) 
on the Internet.

  My rules table is  listed at the bottom.     Our Shorwall IP is 
65.114.41.5.

  Port 10500 should be forwarded to 65.114.41.6:9999, and Port 8070 should 
be forwarded to 69.25.46.8:443.

  Please bear with me, This is the first I have looked at Shorewall, and
the local test connection is probably more accurate than the 69.25.46.8 
attempt which I was working on first.

  My question is therefore:  How do I effect a DNAT- Port forewarding 
connection from 65.114.41.5:10500 to 65.114.41.6:9999?

  Is that similar to the other connection that I need to effect: 
65.114.41.5:8070 to 65.25.46.8:443?

  My shorewall version "addr show" "ip route show" and rules
table are
attached.

  I''m desperate:  If you would like any additional info; please ask.

  Any help is greatly appreciated. 


John Chatelle 
johnch@medent.com 
Community Computer Service 
15 Hulbert Street - P.O. Box 980 
Auburn, New York  13021 
Phone:  (315)-255-1751 
Fax:    (315)-255-3539


--
This message and any attachments may contain information that is protected
by law as privileged and confidential, and is transmitted for the sole use
of the intended recipient(s). If you are not the intended recipient, you
are hereby notified that any use, dissemination, copying or retention of
this e-mail or the information contained herein is strictly prohibited. If
you have received this e-mail in error, please immediately notify the
sender by e-mail, and permanently delete this e-mail.



-- 
This message has been scanned for viruses and
dangerous content by MailScanner and F-Prot.

On Monday 13 March 2006 11:28, John Chatelle wrote:
>   I  have a single interface configuration of the Shorewall Firewall.
>   We are trying to forward a simple ssh connection from port 9999 on our
> firewall to another computer on the same interface.  In another connection,
> we are trying to forward a tcp connection out to another computer (and
> port) on the Internet.
>
>   My rules table is  listed at the bottom.     Our Shorwall IP is
> 65.114.41.5.
>
>   Port 10500 should be forwarded to 65.114.41.6:9999, and Port 8070 should
> be forwarded to 69.25.46.8:443.
>
>   Please bear with me, This is the first I have looked at Shorewall, and
> the local test connection is probably more accurate than the 69.25.46.8
> attempt which I was working on first.
>
>   My question is therefore:  How do I effect a DNAT- Port forewarding
> connection from 65.114.41.5:10500 to 65.114.41.6:9999?
>
>   Is that similar to the other connection that I need to effect:
> 65.114.41.5:8070 to 65.25.46.8:443?
>
>   My shorewall version "addr show" "ip route show" and
rules table are
> attached.
>
>   I''m desperate:  If you would like any additional info; please
ask.
>
>   Any help is greatly appreciated.
This is Shorewall FAQ 2 -- in your case, you are dealing with the external 
interface rather than the internal interface but the principle is the same.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key