[Firehol-support] NAT on vlan

Guy wyldfury at gmail.com
Wed Feb 18 13:27:50 CET 2009


Hi guys,

I've run into a little problem. I'm using firehol to successfully NAT
traffic to a machine on our hosting company's LAN.
I'm trying to do the same thing again, but there's a difference in the
networks this time.

The setup that works looks like this:
===
masquerade eth1
dnat to 10.0.7.120:8000 proto tcp dport 8000 inface eth1
dnat to 10.0.7.120:80 proto tcp dport 80 inface eth1
dnat to 10.0.7.120:22 proto tcp dport 22 inface eth1
dnat to 10.0.7.120:25 proto tcp dport 25 inface eth1

router internet2lan inface eth1 outface eth0
        server bhttp1   accept  dst 10.0.7.120
        server http     accept  dst 10.0.7.120
        server ssh      accept  dst 10.0.7.120
        server smtp     accept  dst 10.0.7.120
        client all accept
===
The LAN ip for the firehol server is 10.0.7.118/255.255.255.240.

On the new setup that is failing, the LAN only server is
10.0.16.50/255.255.255.240 while the firehol server's LAN ip is
10.0.7.119/255.255.255.240.
10.0.7.119 can still ping 10.0.16.50 though. Is this something odd
with VLANs or is there something obvious I'm not aware of?

Thanks
Guy

-- 
Don't just do something...sit there!




More information about the Firehol-support mailing list