News: This forum is now permanently frozen.
Pages: [1]
Topic: Block IP and port forwarding  (Read 1797 times)
« on: February 14, 2009, 23:04:19 »
pasto *
Posts: 2

Hello.
I have a simple network: WAN ---- m0n0wall ---- LAN.  Using Firewall / Rules / LAN I was able to control the traffic just to put that ip (using alias):

Proto     Source          Port     Destination     Port     Description     
(disable)    *           LAN net            *            *              *            Default LAN -> any  (it is disable)   
                  *           PC0001            *            *              *            PC 01     
                  *           PC0002            *            *              *            PC 02     
                  *           PC0003            *            *              *            PC 03     
                  *          WEB_SERV        *            *              *            Web Server

Now. I could not make a port redirection to the web server. I got it configured like this:

Proto     Source     Port            Destination     Port             Description     
TCP    WAN address    80 (HTTP)    WEB_SERV    80 (HTTP)    Servidor Web puerto 80


And..
In Firewall/NAT/Inbound:

If           Proto     Ext. port range     NAT IP          Int. port range     Description     
WAN    TCP             80 (HTTP)           WEB_SERV    80 (HTTP)         Web Server port 80


But I could not enter from the internet to the web server. I tried just putting the rules and does not work, just tried to place and no NAT.
Please if anyone knows how to do it, I can help?
Thank you very much
Sorry for my english.
« Reply #1 on: February 25, 2009, 18:56:12 »
mwhities *
Posts: 16


NAT Setup:
Code:
If Proto Ext. port range NAT IP Int. port range Description  
WAN TCP 80 (HTTP) 192.168.2.7 80 (HTTP) Internal Web Server

Rules Setup:
Code:
TCP * * 192.168.2.7 80 (HTTP) NAT Internal Web Server

I just set this up and tested it out. Seems to work fine for me. Make sure in your Firewall: Rules that you have Source and Port set to "Any" (*) from external.

Hope this helps.

Michael
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines