RE: [cobalt-users] Cube 2 - IP Filter/Firewall

["Jerome Tytgat" <j.tytgat@xxxxxxxx>]

>
> What I have is a 10.x.x.x network submitted as a class A.   My cube is at
> 10.1.1.1 and I have a NT server in the DMZ at 10.1.100.102 (Set by the
> Cubes DHCP server).   I can ping it fine from the cube.

Should be static IP, but it works if the ip stay long.

>
> What I want to do is run a web server on port 80 on the NT server (and
> continue running the webserver on the CUBE also).
>
> I setup a "filter rule" set as
> Policy: Allow
> Source IP : Any
> Source Port:  8090

Of whom ? the client station, it's here where it's wrong !!!

> Destination IP:  10.1.100.102/8

Why 8 ? should be 32 here

> Destination Port:  80
>
> I have tried both protocall TCP and UDP for this.
>
> BUT, when I try to connect from the Internet to my Cube's Static IP on
> port 8090, I get connection refused from either a browser, or a direct
> telnet to the port.
>
> Any ideas what I may be doing wrong?

Anyway you are thinkning the wrong way :)

You should try a program like redir, which redirect a connexion to a IP/port
to another IP/port, I personnaly use it for my VNC connexion , it works
great.

you can find it here :
http://www.redhat.com/swr/i386/redir-2.0-1.i386.html

and of course you have to set up filter to authorize the whole process

_______________________________________________________________
>ISION FRANCE
Jérôme Tytgat
System and Network security Administrator
mailto:j.tytgat@xxxxxxxx    	  http://www.ision.fr
_______________________________________________________________