Re: [Shorewall-users] SNAT not working

[Tom E. <te...@sh...>]

On Wed, 2006-08-30 at 16:25 -0300, Ismael Milach da Silveira wrote:
> Guys, I'm trying to make a rule so the local network would be able to
> reach a local workstation's port by using the external IP, is that
> possible?
> =20
> Here's my "masq" file:
> #####################
> eth1:192.168.123.24       eth1            192.168.123.254    tcp
> 8080
> eth0    eth1
>=20
> ######################
> =20
> Where eth0 is my external interface, eth1 is the local one, 123.24 is
> the local machine I want to reach and 123.254 is eth1's IP.
> =20
> It works fine using DNS "views", but I just wonder if It'd work using
> SNAT.

All of the steps necessary to do this are given in the answer to
Shorewall FAQ 2.

-Tom
--=20
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ te...@sh...
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key