On Sat, 2004-05-15 at 20:04, Christian Hjalmarsson wrote:
> How to forward for ex. port 113 to both a computer at the DMZ network and to
> a computer on the LAN
> Now it works just to a computer at LAN network, and I need to enable it on
> the DMZ too
> How do I do that ??
You cannot do this. This is not a m0n0wall limitation, but it is a
function of the TCP protocol that is impossible to achieve.
> I got an rule that forward to the lan computer end a NAT that tells it to go
> to the specific computer on LAN...
That is right - a single port can only be forwarded to a single place.
If your ISP has allocated you multiple external (WAN) IPs, then it is
easy - just assign all IPs to the WAN interface, and use m0n0wall to NAT
a different IP:Port pair to a different internal address (LAN or DMZ).
Basically, in TCP/IP, an IP Address:Port pair can only ever exist at one
place - kind of like a street address - "1 Monowall Way, Redmond" can
only result in the mailman delivering the mail to one place, not
> Hope you understand my problem
Yes, I understand your problem. I hope you understand the reason you
cannot achieve this without having additional IP addresses from your
Hilton Travis Phone: +61-(0)7-3343-3889
Manager, Quark AudioVisual Phone: +61-(0)419-792-394
Quark Computers http://www.QuarkAV.com/
(Brisbane, Australia) http://www.QuarkAV.net/
Open Source Projects: http://www.ares-desktop.org/
Non Linear Video Editing Solutions & Digital Audio Workstations
Network Administration, SmoothWall Firewalls, NOD32 AntiVirus
Conference and Seminar AudioVisual Production and Recording
War doesn't determine who is right. War determines who is left.