ipchains and ipmasqadm

Matt Terry matt@abernackie.com
Sun, 3 Dec 2000 22:24:12 -0500 (EST)


I had the same concern and I read somewhere??? (I think a mailing list)  that when
masq'ing a network with ipchains you cannot
access the external ip from the internal net using the rulesets you are
using. I cant remember why I think it is so because of security.   
anyways a simple  workaround  is to set up your hosts or lmhosts for
windoze to point to your internal ip on the machine running the web server

If you want to test it out you can use a configure wvdial to
use netzero (a free 56k internet account) or just use your own dial up
account and see if you reach your web server test page.
(of course you will need cable, dsl or something for the primary
connection, a second phone line would work too!)

anyways a hosts file is the way to go....

matt  




On Thu, 30 Nov 2000, Michael Malinak wrote:

> I'm using ipchains on my server to share a single IP.  I'm using ipmasqadm
> to forward ports to my inside machines (mostly games and stuff).  One
> problem I'm having is that if I try to forward a port like port 80 to one of
> my local machines, it works from the outside but not the inside.
> Ex:
> Server 192.168.1.1 port 80 forwarded to WWWServer port 80
> (ipmasqadm portfw -a -P tcp -L 192.168.1.1 80 -R 192.168.1.3 80)
> Client 192.168.1.2
> WWWServer 192.168.1.3
> 
> I want all www requests from client to be served by WWWServer.  This doesn't
> happen.
> What's wrong with the setup?
> 
> 
> 
> _______________________________________________
> linux-user mailing list
> linux-user@egr.msu.edu
> http://www.egr.msu.edu/mailman/listinfo/linux-user
>