Well, thinking that perhaps Proxy ARP was my solution, I tried to set it
up with the network:
A.B.C.114/29, but that didn't work.
However, setting up individual Proxy ARPS for A.B.C.115-118 seemed to do
the trick!
Toli wrote:
> I've read a few months back in the archives, and there are plenty of
> people who seem to have problems getting any type of NAT working. I
> am not one of those people. I successfully NAT ports from my WAN IP
> to both machines on my LAN as well as my OPT interfaces with no
> problems. My problem is occuring because I have more than one WAN IP,
> and now need to NAT some ports from some of thoese IP addresses to
> machines in my LAN and OPT interfaces. following is all my settings,
> including the Inbound NAT rules that work.
>
> WAN interface: (I have IP addresses A.B.C.114-118)
> IP Address: A.B.C.114 / 29
> Gateway: A.B.C.113
> Block Private networks: yes
>
> LAN interface:
> IP Address: 10.0.0.1 / 24
>
> # firewall rules in place but not designed help with the below
> problems (ie, tell me if it's one of these that is causing the problem)
> #WAN
> (no rules in place)
> # LAN - designed to allow traffic out of the LAN, but not into any of
> my other OPT subnets (10.*.*.*)
> Proto: *, Source: LAN net, Port: *, Destination: !10.0.0.0/16, Port: *
>
> # first rule allows port 80 on my main WAN IP (A.B.C.114) to route to
> my personal box (10.0.0.131)
> # this works!
> inbound nat:
> Proto: TCP, Port: 80, NAT IP: 10.0.0.131, Port: 80
> firewall:
> Proto: TCP, Source: *, Port: *, Destination: 10.0.0.131, Port: 80
>
> # second rule allows port 80 on my next WAN IP (A.B.C.115) to route to
> my personal box (10.0.0.131)
> # this rule does not work, I have no idea why, it hates me
> Server Nat:
> IP: A.B.C.115 Description: ServerNat1
> Inbound NAT:
> Proto: TCP, Port: 80, Nat IP: 10.0.0.131 (A.B.C.115), Port: 80
> firewall:
> Proto: TCP, Source: *, Port: *, Destination: 10.0.0.131, Port: 80
>
> # third rule allows port 80 on my next WAN IP (A.B.C.116 to route to
> my personal box (10.0.0.131) via 1:1
> # this rule also does not work, I have no idea why, it also hates me
> 1:1 settings:
> Extern IP: A.B.C.116/32, Intern IP: 10.0.0.131/32
> Firewall: as far as I can tell, it should be the same, so the same
> Proto: TCP, Source: *, Port: *, Destination: 10.0.0.131, Port: 80
>
> is that enough information to help me out?
>
> Thanks! Been enjoying m0n0wall for quite some time (my box is even in
> the gallery), just finally starting to get into some more complex rules.
>
> --
> Toli Leonovich
>
>
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
|