On Thu, Feb 28, 2002 at 02:34:01PM -0300, Rafael Coninck Teigao wrote:
> binat on ne3 from 10.0.0.139 to any -> 192.168.1.1
>
> Where ne3 is the iface that has the address 192.168.1.1 and
> 10.0.0.139 is assigned to my rl0 iface. Machine connected to ne3 can
> ping (and even connect to) 10.0.0.139, but they can't get to do anything
> to 10.0.0.138.
binat translates source addresses for outgoing packets, and destination
addresses for incoming packets, on the interface specified in the binat
rule.
Your rule translates source address 10.0.0.139 to 192.168.1.1 for
packets going out on ne3, and destination address 192.168.1.1 to
10.0.0.139 for packets coming in on ne3.
Other addresses, like 10.0.0.138, are never translated. I think you're
using binat where you should rather use two nat rules (or no translation
at all, if the hosts use the firewall as gateway to the other networks).
Daniel
|