incoming port forwarding not working 3.3.22

This is a discussion on incoming port forwarding not working 3.3.22 within the IPFilter forums, part of the System Security and Security Related category; Hello, My internal machines can access the internet fine, but I cannot get the incoming port forwarding (ftp/smtp) to ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-02-2004
brent@oicinc.com
 
Posts: n/a
Default incoming port forwarding not working 3.3.22

Hello,

My internal machines can access the internet fine, but I cannot get
the incoming port forwarding (ftp/smtp) to work. Below are my ipnat and ipf
conf files.
-------------------------------------
ipnat.conf

# Outgoing ftp client active transfers to the internet
#####################################
map iprb0 172.16.100.0/24 -> xxx.xxx.xxx.xxx/32 proxy port ftp ftp/tcp
#####################################
# Shoehorn translated connections tcp/udp to port range 40000-60000
#####################################
map iprb0 172.16.100.0/24 -> xxx.xxx.xxx.xxx/32 portmap tcp/udp 40000:60000
#####################################
# NAT mapping for all other protocols
#####################################
map iprb0 172.16.100.0/24 -> xxx.xxx.xxx.xxx/32
#####################################
# mail
#####################################
rdr iprb0 0.0.0.0/0 port 25 -> 172.16.100.125 port 25
#####################################
# ftp
#####################################
rdr iprb0 0.0.0.0/0 port 21 -> 172.16.100.125 port 21
-------------------------------------
ipf.conf

# iprb0 = external internet interface
# iprb1 = internal lan interface
####################################
# allow loopback to run free
####################################
pass in quick on lo0 all
pass out quick on lo0 all
####################################
# ftp:
####################################
pass in quick on iprb0 proto tcp from any to 172.16.100.125/32 port = 21
flags S keep state
####################################
# smtp:
####################################
pass in quick on iprb0 proto tcp from any to 172.16.100.125/32 port = 25
flags S keep state keep frags
pass out quick on iprb0 proto tcp from 172.16.100.125/32 to any port = 25
flags S keep state keep frags
####################################
# pass traffic from lan to internet tcp/udp/icmp
####################################
pass in quick on iprb1 proto tcp from 172.16.100.0/24 to any keep state
pass in quick on iprb1 proto udp from 172.16.100.0/24 to any keep state
pass in quick on iprb1 proto icmp from 172.16.100.0/24 to any keep state
pass out quick on iprb0 proto tcp from 172.16.100.0/24 to any keep state
pass out quick on iprb0 proto udp from 172.16.100.0/24 to any keep state
####################################
# block everything else
####################################
block in quick all
block out quick all
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 03:49 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0