Firewall/NAT

How do I setup the wan interface to listen on 3 seperate IPs'

It is firewalling three sepereate internal Servers all running https applications. I have gone into the server nat page and added the two extra IP's. Configured the NAT to use the IP but not getting any connections.

I imagine its just a simple case of setting up virtual IPS but can't see how to make it work.

Paul

It sounds to me like you need 1:1 NAT. You may also need proxy ARP, and make sure your firewall rules allow connections to the IP addresses you're using.

http://doc.m0n0.ch/handbook/nat.html

db

I presume that by adding 1:1 mapping then I would be opening up the entire port range.

I can't do this. All I want to do is map 3 external IP/ports to three internal IP/ports

eg x.x.x.x:443 to y.y.y.y:443

You can firewall 1:1 NAT addresses. Just add a rule allowing incoming tcp connections with destination x.x.x.x:443. The remaining ports on x.x.x.x should be blocked by default, but if you want to be sure, then add a second rule blocking all traffic to x.x.x.x. Do this for each of your 1:1 addresses.

db

If I add some NAT 1:1 rules, will I able to access to the natted IPs from the LAN network too?
Bye!

Using the public IP, no:

http://doc.m0n0.ch/handbook/faq-lannat.html

Using the LAN IP, yes.

db

Isn't there any workaround to solve this?

Isn't there any workaround to solve this?

Read the FAQ that was just linked.

dusty, try to read here

http://doc.m0n0.ch/handbook/faq-ipalias.html

and here

http://doc.m0n0.ch/handbook/examples.html

bye