OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Frank Volf (volfoasis.IAEhv.nl)
Date: Mon Jul 23 2001 - 09:07:28 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Cy Schubert - ITSD Open Systems Group wrote:
    > In message <3B5B49DC.2606DAA8miltonstreet.com>, Sam Carleton writes:
    > > If you where not following along with the problem I had, the rdr rules
    > > in my nat file where not working. Someone send me a private email that
    > > resolved the problem. I had:
    > >
    > > rdr iy0 0/32 port 443 -> 192.168.0.x port ??? tcp
    > >
    > > But 0/32 is not valid in a rdr, I had to use the real ip address. Now I
    > > simply need to write a script that will update the nat table every time
    > > my IP changes...
    > >
    > > I am off to do some dhclient_script hacking!
    >
    > You don't need to hack anything. Here is an example from one of the
    > firewalls I manage.
    >
    > rdr xl0 0/0 port 25 -> 10.1.2.3 port 25 tcp

    Yeah.. but this redirects all incoming traffic with destination port 25 to
    another box. That is something different from what Sam tries to achieve
    namely, redirecting traffic to the DHCP assigned IP address of the external
    interface of his firewall to another host.

    Frank