|
||||||||||
Why not put the couple of computers back in on the private address space and use the VPN services on m0n0wall to route to their workstations? > I have a couple of computers that the users have needed to VPN into, so > they got public IP addresses. On Mon, 15 Nov 2004 20:27:57 -0700, Tony Pitman <tony at shatalmic dot com> wrote: > I did search the archives before posting this. I did not find any relevant > answers. > > I have a single m0n0wall router running. Both Ethernet cards, my T1 Cisco > router to the Internet and all computers on the network are connect to a > dumb switch. > > The WAN Ethernet card of the m0n0wall router is set to an IP public address > that is routed to the Cisco router. > > The LAN Ethernet card is set to do NAT routing. > > Most of the computers on the LAN are set to DHCP and end up being inside > the NAT. > > I have a couple of computers that the users have needed to VPN into, so > they got public IP addresses. > > The problem with these few public computers is that they are bypassing my > traffic shaper and I want to put them behind the NAT. > > I tried to set up one using the NAT 1:1. I assigned it an internal NATed IP > address. I then assigned the public address in the NAT 1:1 section. That > computer lost all Internet access. I then added the proxy ARP just to make > sure and that did not help. > > Does anyone have any idea what I am doing wrong? If I just give the > computer an internal NATed address (and don't set up the NAT 1:1) > everything works fine as far as the computer being able to get OUT to the > Internet. As soon as I enter the 1:1 entry for that computer's internal > address and the public address, that computer can't see the Internet any more. > > I even tried just mapping some ports and NOT using the NAT 1:1 and that > didn't work either. > > Any thoughts? > > Thanks, > > Tony Pitman > > --------------------------------------------------------------------- > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > > |