Port forwarding(virtual server) bug

[Expert]

Hi all.
I’ve found a bug. Beta 14. When I forward a port during web-interface (Router=>Virtual server), the page script generates iptables rule incorrectly. The problem is in /root/kerbynet.cgi/scripts/router_patconfig script.
The string

if [ “$VIRTUALIP” != ANY ] ; then
VIP=”-d $VIRTUALIP”

MUST be

if [ “$VIRTUALIP” != ANY ] ; then
VIP=”-s $VIRTUALIP”

I’ve fixed it, all works fine. I hope it will be fixed in next releases. Good luck!

[imported_fulvio]

It is not a bug. On my opinion make more sense to match the destination IP (Virtual IP).

Regards
Fulvio

[Expert]

Fulvio,thanks for your answer. But my situation is:
Our company have internal network 192.168.0.0/24 and 1 Externat internet IP. Let it be $E. Three managers of the company wants to work at home with their remote workstations via Microsoft RDP (port 3389). Their home IP’s are $A,$B,$C. So, I need the next schematic:

$A=>$E=>192.168.0.100:3389
$B=>$E=>192.168.0.101:3389
$C=>$E=>192.168.0.102:3389
Other incoming conections to company’s gateway ($E) must be dropped.

This schema is impossible to release with your algorithm because every packet, coming to external interface will have $E destination adress.

[Author]

Posts