[ previous ] [ next ] [ threads ]
 
 From:  "Lee Sharp" <leesharp at hal dash pc dot org>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Re: [m0n0wall] the meaning of FAQ 16.3
 Date:  Tue, 16 Jan 2007 22:40:40 -0600
From: <rlpumphrey at comcast dot net>


> driven to ask.

> 16.3. Why isn't it possible to access NATed
> services by the public IP address from
> LAN?
> Problem. It is not possible to access NATed services using the public
> (WAN) IP
> address from within LAN

Let me put this in cartoon script form...

Cast:

192.168.1.125 - A nice client PC from the upper east side.
192.168.1.10 - A nice web server from mid-town
65.20.65.20 - The public address of the web server
www.myservice.com - The web name of the web server.
Bob - A DNS server
25.60.25.60 - The Mysterious Stranger...  (Oooooo)

The Internet - Night.

25.60.25.60 - Hi Bob.  I need to talk to www.myservice.com.
Bob - OK, 25.60.25.60, you need to call 65.20.65.20.
25.60.25.60 - ack.

25.60.25.60 - Hi 65.20.65.20.  I need web services.
(Sound off stage...) Hey 192.168.1.10, 25.60.25.60 says "Hi 65.20.65.20.  I
need web services."
65.20.65.20 - Hi 25.60.25.60.  I have web services.
25.60.25.60 - Send me this page...


192.168.1.125 - Hi Bob.  I need to talk to www.myservice.com.
Bob - OK, 192.168.1.125, you need to call 65.20.65.20.
192.168.1.125 - ack.

192.168.1.125 - Hi 65.20.65.20.  I need web services.
(Sound off stage...) Hey 192.168.1.10, 192.168.1.125 says "Hi 65.20.65.20.
I need web services."
192.168.1.10 - Hi 192.168.1.125.  I have web services.
192.168.1.125  - Who are you?  I want 65.20.65.20.  Go away...