[Firehol-support] Re: Redirecting ports to other computers

[Thomas Arendsen Hein]

* Francis Brosnan Blazquez <francis at aspl.es> [20050127 23:07]:
> A concrete scenario is follows: a have two boxes behind a firewall
> (running firehol ;-) and I need to allow incoming connections to, for
> example, port 2222 and enroute this connection to port 22.

Assuming a dialup connection on ppp0 with two internal hosts to
forward to:

dnat to "10.0.0.1:22" inface "ppp0" proto "tcp" dport "2222"
dnat to "10.0.0.2:22" inface "ppp0" proto "tcp" dport "2223"

and you need to allow this traffic in a router:

router "ext2int" inface "ppp0" outface "eth0"
    route "ssh" accept dst "10.0.0.1 10.0.0.2"

Thomas

-- 
Email: thomas at intevation.de
http://intevation.de/~thomas/