Home / Browse / Firewall Builder / Mail / Archive

Firewall Builder

Email Archive: fwbuilder-discussion (read-only)

2002:	_Jan	_Feb	_Mar (2)	_Apr (2)	_May (8)	_Jun (1)	_Jul (1)	_Aug (59)	_Sep (82)	_Oct (85)	_Nov (55)	_Dec (60)
2003:	_Jan (35)	_Feb (58)	_Mar (62)	_Apr (54)	_May (113)	_Jun (101)	_Jul (60)	_Aug (41)	_Sep (98)	_Oct (101)	_Nov (140)	_Dec (69)
2004:	_Jan (58)	_Feb (47)	_Mar (46)	_Apr (67)	_May (157)	_Jun (385)	_Jul (270)	_Aug (182)	_Sep (125)	_Oct (86)	_Nov (83)	_Dec (115)
2005:	_Jan (70)	_Feb (120)	_Mar (81)	_Apr (108)	_May (88)	_Jun (56)	_Jul (95)	_Aug (71)	_Sep (55)	_Oct (90)	_Nov (57)	_Dec (40)
2006:	_Jan (13)	_Feb (72)	_Mar (83)	_Apr (40)	_May (68)	_Jun (41)	_Jul (91)	_Aug (76)	_Sep (71)	_Oct (55)	_Nov (45)	_Dec (111)
2007:	_Jan (120)	_Feb (92)	_Mar (78)	_Apr (24)	_May (39)	_Jun (32)	_Jul (64)	_Aug (10)	_Sep (50)	_Oct (18)	_Nov (41)	_Dec (43)
2008:	_Jan (15)	_Feb (37)	_Mar (25)	_Apr (27)	_May (34)	_Jun (17)	_Jul (34)	_Aug (37)	_Sep (88)	_Oct (28)	_Nov (42)	_Dec (35)
2009:	_Jan (43)	_Feb (46)	_Mar (49)	_Apr (19)	_May (52)	_Jun (40)	_Jul (69)	_Aug (19)	_Sep (14)	_Oct (23)	_Nov (46)	_Dec (38)
2010:	_Jan (10)	_Feb (16)	_Mar (53)	_Apr (30)	_May (29)	_Jun (43)	_Jul (36)	_Aug (88)	_Sep (30)	_Oct (28)	_Nov (44)	_Dec (17)
2011:	_Jan (31)	_Feb (23)	_Mar (53)	_Apr (70)	_May (67)	_Jun (17)	_Jul (58)	_Aug (36)	_Sep (11)	_Oct (22)	_Nov (15)	_Dec (24)
2012:	_Jan (22)	_Feb (3)	_Mar (15)	_Apr (23)	_May (42)	_Jun (20)	_Jul (20)	_Aug (7)	_Sep (12)	_Oct (8)	_Nov (16)	_Dec
2013:	_Jan (17)	_Feb (8)	_Mar (7)	_Apr (12)	_May (7)	_Jun	_Jul	_Aug	_Sep	_Oct	_Nov	_Dec

[Fwbuilder-discussion] redirection problem

From: Vincenzo Arena <vincenzo.arena@er...> - 2003-08-01 12:13

Attachments: Message as HTML

Hi, 
I'v got the following strange ( for me at least ) problem: I have this
network setup
 
           ------------
------------
           - ext Fw - eth0 ----------- net 172.16.30.0 ----- - int Fw -
---net 192.168.68.0 --
           ------------               -- host 172.16.30.25
------------         client 192.168.68.8
 

the host 172.16.30.25 has its default route to 172.16.30.253 ( eth0 of
the ext fw ) 

I have one role that permits 172.16.30.0 to any

and rule 22 ( the last one ) deny all 

If I try to ping from 192.168.68.8 to 172.16.30.25 i get on the ext fw:

 RULE 22 -- DENY IN=eth0 OUT=eth0 SRC=172.16.30.25 DST=192.168.68.8
LEN=84 TOS=0x00 PREC=0x00 TTL=63 ID=49298 PROTO=ICMP TYPE=0 CODE=0
ID=22582 SEQ=768 

fwbuilder-1.0.10-1  -- kernel 2.4.18-3 ( RH ) -- iptables-1.2.5-3

The problem is that I cannot find any rule that permits redirection ..
any idea?

thanks in advance 

Vincenzo

Re: [Fwbuilder-discussion] redirection problem

From: Vadim Kurland <vadim@vk...> - 2003-08-01 15:53

On Friday, August 1, 2003, at 05:13  AM, Vincenzo Arena wrote:

> =A0
>
> =A0Hi,
> I'v got the following strange ( for me at least ) problem: I have this =
=20
> network setup
> =A0
> =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =20
> =
------------=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0-------=20
> -----
> =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 - ext Fw - eth0 ----------- net =
172.16.30.0 ----- - int Fw =20
> - ---net 192.168.68.0 --
> =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 ------------=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0-- host 172.16.30.25=A0=A0=A0=A0=A0=A0=A0 =20
> ------------=A0=A0=A0=A0=A0=A0=A0=A0 client 192.168.68.8
> =A0
>
>
>
> the host 172.16.30.25 has its default route to 172.16.30.253 ( eth0 of =
=20
> the ext fw )
>
> I have one role that permits 172.16.30.0 to any
>
> and rule 22 ( the last one ) deny all
>
> If I try to ping from 192.168.68.8 to 172.16.30.25 i get on the ext =
fw:
>
> =A0RULE 22 -- DENY IN=3Deth0 OUT=3Deth0 SRC=3D172.16.30.25 =
DST=3D192.168.68.8 =20
> LEN=3D84 TOS=3D0x00 PREC=3D0x00 TTL=3D63 ID=3D49298 PROTO=3DICMP =
TYPE=3D0 CODE=3D0 =20
> ID=3D22582 SEQ=3D768
>
> fwbuilder-1.0.10-1=A0 -- kernel 2.4.18-3 ( RH ) -- iptables-1.2.5-3
>
> The problem is that I cannot find any rule that permits redirection .. =
=20
> any idea?

so, you ping from the host on the network behind internal firewall, but =20=

see echo reply in the log of the external firewall, right ?

You need a route on the host 172.16.30.5 to send packets headed for =20
192.168.8.0/24 through internal firewall. Currently these packets just =20=

follow default route, that is why you see them hit external firewall.

--vk

[Fwbuilder-discussion] redirection problem

From: dhaval thakar <dpthakar@re...> - 2005-06-16 12:35

Attachments: Message as HTML

=A0i have only one lan card in my squid & i want to redirect all the trafi=
c comming on port 80 to 3128=0A=0Ai know it from the command line=0Abut how=
 to configure it using fwbuilder=0A=0A=0A=0A

Re: [Fwbuilder-discussion] redirection problem

From: Vadim Kurland <vadim@vk...> - 2005-06-17 10:16

On Jun 16, 2005, at 5:37 AM, dhaval thakar wrote:

>   i have only one lan card in my squid & i want to redirect all the  
> trafic comming on port 80 to 3128
>
> i know it from the command line
> but how to configure it using fwbuilder

there is an example of NAT redirect rule in the Users Guide (chapter  
10.7 "Redirection the traffic". It looks like this:

OSrc=your internal LAN
ODst=any
OSrv=http
TSrc=Original
TDst=firewall object
TSrv=squid

Objects "http" and "squid" can be found in the standard objects  
library, under Services/TCP

--vk