Edit Configurar ipf (ipfilter/ipnat) en solaris, equivalente a iptables de linux

Title:

Last edited: 3:37:01 pm on 8 March 2011 by salchicha

Fuentes:
- *http://danbordeanu.blogspot.com/2009/02/nat-in-opensolaris.html*
- *http://danbordeanu.blogspot.com/2008/12/how-to-enable-ip-forward-in-opensolaris.html*
- *http://opensolaris.org/jive/thread.jspa?threadID=111666*
- *http://blogs.sun.com/jayd/entry/solaris_tip_of_the_week6*
- Según *la faq>http://www.phildev.net/ipf/IPFques.html#ques10*, rdr reescribe cuando entra el paquete en un interfaz y map lo hace cuando sale.
- Según la *página de manual de ipnat>http://www.ipnom.com/FreeBSD-Man-Pages/ipnat.5.html* NO SE PUEDE REESCRIBIR EL PUERTO EN UNA LINEA MAP (es decir, en un interfaz de salida).

Código:
<code>
# cp /dev/tty test.ipnat
map rtls0 from any to 3.0.1.170 port = 502 -> 0/32
rdr rtls0 3.0.1.170 port 502 -> 3.0.1.170 port 504 tcp
# ipnat -l
ioctl(SIOCGNATS): I/O error
# uname -a
SunOS arganzuela 5.10 Generic_127112-11 i86pc i386 i86pc
#  svcs -a | grep forward
disabled        9:25:13 svc:/network/ipv6-forwarding:default
disabled        9:25:13 svc:/network/ipv4-forwarding:default
# ifconfig rtls0 router
# ndd -set /dev/ip ip_forwarding 1
# routeadm -e ipv4-forwarding
# svcadm enable network/ipv4-forwarding
# svcs -a | grep forward
disabled        9:25:13 svc:/network/ipv6-forwarding:default
online          9:42:43 svc:/network/ipv4-forwarding:default
# svcadm enable ipfilter
#  ipnat -l
List of active MAP/Redirect filters:

List of active sessions:
# ipnat -CF -f test.ipnat
0 entries flushed from NAT table
0 entries flushed from NAT list
# ipnat -l   
List of active MAP/Redirect filters:
map rtls0 from any to 3.0.1.170/32 port = 502 -> 0.0.0.0/32
rdr rtls0 3.0.1.170/32 port 502 -> 3.0.1.170 port 504 tcp

List of active sessions:
#
</code>

- lock this page
- enter new password
- reenter same password

Send e-mail alerts to these addresses upon next save: