Can't open http port on freebsd firewall ?????????

solarisfan

hi , all
I just follow the instruction on

http://www.chinaunix.net/cgi-bin/bbs/topic.cgi?forum=2&topic=327

in /etc/ipfw.conf
add 10001 allow tcp from any to x.x.x.x 80 in     //向整个Internet开放HTTP服务。

in /etc/natd.conf

redirect_port tcp 192.168.0.2:80 x.x.x.x:80     //把对服务器IP为x.x.x.x的http访问转到192.168.0.2的80上去。

But I am still unable to enable the http service on my freebsd ipfw.

WHy ?? Can you help me to solve this problem???

I am using freebsd 4.7 ....

Thanks!!

jsn

把192.168.0.2换成inetnet的地址

solarisfan

hi,
I just put my interanl webserver ip address in

redirect_port tcp internalwebip:80 firewallip:80

but the problem is .

The http port on firewall was blocked.

but the firewall is listening the http

firewall# netstat -na |grep LIST
tcp46      0      0  *.80                   *.*                    LISTEN
tcp4       0      0  *.22                   *.*                    LISTEN
tcp46      0      0  *.22                   *.*                    LISTEN

so what's the problem ??

jsn

你上面只是把192.168.0.2这个地址上的80端口映射到其他机器了，而来自internet的对80的访问都被block住了。

solarisfan

hi,
How can I solve my problem ? How can I open my http port on my firewall ??
Thanks !