Koozali.org: home of the SME Server

Port forwarding and other evils

Colin Elliott

Port forwarding and other evils
« on: December 06, 2000, 09:21:21 PM »
hey,
I'm stuck. Here is the deal. I've got a e-smith box holding up an ADSL line on it's external NIC. It's internal NIC is on a cross overcable to an NT boxen running Small Buisness Server yes it sucks but it's cheap). The NT box the has an internal NIC servicing the LAN with Proxy Server, etc.... (note Proxy Server will not work with residental ADSL)

anyhoo the linux box is masqing the inter lan (the nt box) and port forwarding the mail, this works, and we can send and recieve mail throught exchange. However the web (port 80) is not forwarding. Here's the lowdown.

ipchains -P input ACCEPT
ipchains -P output ACCEPT
ipchains -P forward DENY

ipchains -A forward -j MASQ

ipmasqadm portfw -a -P tcp -L $EXTERNAL 80 -R $INTERNAL 80
ipmasqadm portfw -a -P tcp -L $EXTERNAL 25 -R $INTERNAL 25


I know that's not much of a firewall I just want to get it working and then I'll tighnen it up.

As I said the masqing and the mail work fin but I can't get to the internal web sever.

Any suggestions would be appreciated.

PS I know ipmasqadm isn't installed in e-smith (a serious omission IMHO) I installed it myself


Colin