This is a discussion on Re: sample/proxy.c within the IPFilter forums, part of the System Security and Security Related category; Ok, the ioctl() are failing, but inetd is eating the stderr output.. Sigh. error: Not owner. root 12660 12523 0 ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Ok, the ioctl() are failing, but inetd is eating the stderr output.. Sigh. error: Not owner. root 12660 12523 0 17:51:19 ? 0:00 /usr/local/bin/proxy e1000g0 # ls -lL /dev/ipl* crw-rw-rw- 1 root sys 165, 0 Mar 20 15:31 /dev/ipl crw-rw-rw- 1 root sys 165, 6 May 19 17:51 /dev/iplookup So I assume that doesn't mean Unix owner (root, and /dev looks accessable) but rather NAT rule owner? Lund Darren Reed wrote: >>SunOS softrouter 5.10 Generic_118844-28 i86pc i386 i86pc >>ip_fil4.1.10 >>pfil-2.1.7 >> >> > box]A-----B[gateway]C----D[dest >> > >> > A = 210.my.ext.IP >> > B = 172.20.11.254 >> > C = ??? >> > D = 210.172.133.140 >> >> >>box]A-----B[gateway]C----D[dest >> >>A = 210.my.ext.IP >>B = 210.172.133.140 >>C = 172.20.11.254 >>D = Either on 210.172.133.140/172.20.11.254 server >> OR any of the internal cluster boxes (172.20.11.5 - 172.20.11.15) > > > Try this RDR rule: > rdr e1000g0 0.0.0.0/0 port 7100 -> 210.172.133.140 port 1 tcp > > And e1000g1 should be C. > > Darren > > -- Jorgen Lundman | <lundman@lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home) |