[Shorewall-users] rules & nat files for DNAT

[Hirantha W. <hir...@cr...>]

Dear experts,

=20

Quick quotation...

=20

I have a sendmail server behind the shorewall-2.1.7 server. I would like
to do Port forwarding (DNAT) for clients on the internet, who need to
access the mail server.

=20

Please let me know, which way is the most suitable to accomplish this;
using following 2 types of configurations

=20

Setup -=20

=20

Internet -- > shorewall -- > sendmail

                        |                       |=20

            130.252.100.69              Public IP -> 130.252.100.70

                                                Private IP ->
192.168.100.5

=20

Rules file...

=20

=20

#ACTION           SOURCE                      DEST
PROTO             DEST    SOURCE          ORIGINAL

#
PORT   PORT(S)           DEST

DNAT                net:130.252.100.70        loc:192.168.100.5
tcp                    smtp

=20

=20

OR

=20

Rules file.....

           =20

#ACTION           SOURCE                      DEST
PROTO             DEST    SOURCE          ORIGINAL

#
PORT   PORT(S)           DEST

DNAT                net                                loc:192.168.100.5
tcp                    smtp

=20

Nat file...

=20

#EXTERNAL      INTERFACE      INTERNAL         ALL INTERFACES
LOCAL

130.252.100.70  eth0:0               192.168.100.5    No
No

=20

=20

Thanks in advance...

=20

- Hirantha


Disclaimer and Confidentiality

This email and any files transmitted with it are confidential and =
intended solely for the use of the individual or entity to whom they are =
addressed. If you have received this email in error please notify the =
system manager. This message contains confidential information and is =
intended only for the individual named. If you are not the named =
addressee you should not disseminate, distribute or copy this e-mail. =
Please notify the sender immediately by e-mail if you have received this =
e-mail by mistake and delete this e-mail from your system. If you are =
not the intended recipient you are notified that disclosing, copying, =
distributing or taking any action in reliance on the contents of this =
information is strictly prohibited.