dragoss
asked on
ipmasqadm portfw does not work
hello everybody,
perhaps this is a newbye question (or problem) but I just can't
enable PORTFW on REDHAT 6.0 (kernel 2.2.5 and then upgrade to 2.2.12) .
The machine has 2 network cards
Accomplished tasks were:
- kernel recompilation with all necessary options enabled (masquerading, portfw ... - not modules)
- ip_forwarding enabled (set to 1)
- creation of rc.firewall script as:
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.168.65.0/24 -j MASQ
/usr/sbin/ipmasqadm portfw -f
/usr/sbin/ipmasqadm portfw -a -P tcp -L OUTSIDE_ADDRESS 80 -R 192.168.65.69 80
I mention that there are no errors when script is executed !
I do not have any machine outside of the firewall (this is another private network) but telneting from the firewall on
the IP of the external card (OUTSIDE_ADDRESS) no redirection happens.
Thank you in advance.
perhaps this is a newbye question (or problem) but I just can't
enable PORTFW on REDHAT 6.0 (kernel 2.2.5 and then upgrade to 2.2.12) .
The machine has 2 network cards
Accomplished tasks were:
- kernel recompilation with all necessary options enabled (masquerading, portfw ... - not modules)
- ip_forwarding enabled (set to 1)
- creation of rc.firewall script as:
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.168.65.0/24 -j MASQ
/usr/sbin/ipmasqadm portfw -f
/usr/sbin/ipmasqadm portfw -a -P tcp -L OUTSIDE_ADDRESS 80 -R 192.168.65.69 80
I mention that there are no errors when script is executed !
I do not have any machine outside of the firewall (this is another private network) but telneting from the firewall on
the IP of the external card (OUTSIDE_ADDRESS) no redirection happens.
Thank you in advance.
ASKER
Yes it helps. Thanks a lot.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I solved also the problem with portfw autofw . You have to access the external network card from outside (and not from the firewall box). I wonder if anyone knows if you can resolve sqlnet (Oracle) over this arrangement. ?? which are the communication ports beside 1521, 1526.......
http://www.rpmfind.net/linux/RPM/contrib/libc6/i386/redir-2.0-1.i386.html
i`m using redir to forward a telnet connection from a real ip adress to an internal ip address throught an SSH session (telnet to a vms)
Hope that help