------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com
I must say, that is the shortest problem report we have ever received :-) I assume that you clicked the ''send'' button too soon? -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com
Sorry. I need to make all Internet requests on IP 172.25.5.1 is redirected to the IP 10.120.7.1 port indifferent. How do the shorewall? Sorry for my bad english. Desculpe. Preciso fazer com que todas as solicitações da Internet no IP 172.25.5.1 sejam redirecionados para o IP 10.120.7.1 indiferente da porta. Como fazer no shorewall? Desculpe pelo meu péssimo Inglês. ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com
Orlandinei Vujanski wrote:> Sorry. > I need to make all Internet requests on IP 172.25.5.1 is redirected to > the IP 10.120.7.1 port indifferent. How do the shorewall? > > Sorry for my bad english.In /etc/shorewall/rules, the following rule will redirect all requests from the ''net'' zone addressed to 172.25.5.1 to host 10.120.7.1 in the ''loc'' zone. DNAT net loc:10.120.7.1 - - - 172.25.5.1 -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com
You can do that by an entry in the rules file Example: DNAT net loc:10.120.7.1 where net is your untrusted and loc your trusted zone. If 172.25.5.1 is not your interface (e.g. phy ethernet interface) you can specify a original destination as well. In most cases it fits users need to map only a few ports. Example of translating only web and mail with different original destination DNAT net loc:10.120.7.1 tcp 80,25 - 172.25.5.1 You can expand net for example as net:1.2.3.4 which means that only 1.2.3.4 is allowed to match this rule. Cheers Mike _____ Von: Orlandinei Vujanski [mailto:orlandinei@gmail.com] Gesendet: Mittwoch, 27. Januar 2010 22:56 An: Shorewall Users Betreff: Re: [Shorewall-users] Problem Shorewall Sorry. I need to make all Internet requests on IP 172.25.5.1 is redirected to the IP 10.120.7.1 port indifferent. How do the shorewall? Sorry for my bad english. Desculpe. Preciso fazer com que todas as solicitações da Internet no IP 172.25.5.1 sejam redirecionados para o IP 10.120.7.1 indiferente da porta. Como fazer no shorewall? Desculpe pelo meu péssimo Inglês. ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com
I thought DNAT rules was also required to pass the port and protocol. I will test tomorrow. Thank Tom. 2010/1/27 Tom Eastep <teastep@shorewall.net>> Orlandinei Vujanski wrote: > > Sorry. > > I need to make all Internet requests on IP 172.25.5.1 is redirected to > > the IP 10.120.7.1 port indifferent. How do the shorewall? > > > > Sorry for my bad english. > > In /etc/shorewall/rules, the following rule will redirect all requests > from the ''net'' zone addressed to 172.25.5.1 to host 10.120.7.1 in the > ''loc'' zone. > > DNAT net loc:10.120.7.1 - - - 172.25.5.1 > > -Tom > -- > Tom Eastep \ When I die, I want to go like my Grandfather who > Shoreline, \ died peacefully in his sleep. Not screaming like > Washington, USA \ all of the passengers in his car > http://shorewall.net \________________________________________________ > > > > ------------------------------------------------------------------------------ > The Planet: dedicated and managed hosting, cloud storage, colocation > Stay online with enterprise data centers and the best network in the > business > Choose flexible plans and management services without long-term contracts > Personal 24x7 support from experience hosting pros just a phone call away. > http://p.sf.net/sfu/theplanet-com > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com