Login or Register to Ask a Question and Join Our Community


Solaris

Syntax error ipfilter solaris 10

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems Solaris Syntax error ipfilter solaris 10
# 1  
Old 06-15-2010
Syntax error ipfilter solaris 10
Hello everyone. I have a problem with ipfilter, you must create a rule to redirect traffic from the external network to internal server on port 443. New Rule:
rdr e1000g0 from xx.xx.xx.69/32 port 443 -> 192.168.10.5 port 443 tcp,
use ipnat -CF -f /etc/ipnat.conf, and ipf send me from error:
Code:
bash-3.00# ipnat -CF -f /etc/ipf/ipnat.conf
0 entries flushed from NAT table
2 entries flushed from NAT list
syntax error error at "->", line 8

Need help please!

Code:
bash-3.00# /sbin/ipconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
        inet 127.0.0.1 netmask ff000000
e1000g0: flags=1100843<UP,BROADCAST,RUNNING,MULTICAST,ROUTER,IPv4> mtu 1500 index 2
        inet xxx.xxx.xx.69 netmask ffffff00 broadcast 193.200.88.255
        ether 0:c:29:aa:fc:77
e1000g1: flags=1100843<UP,BROADCAST,RUNNING,MULTICAST,ROUTER,IPv4> mtu 1500 index 3
        inet 192.168.10.1 netmask ffffff00 broadcast 192.168.54.255
        ether 0:c:29:aa:fc:81

bash-3.00# ipf -V
ipf: IP Filter: v4.1.30 (600)
Kernel: IP Filter: v4.1.30
Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 0
Feature mask: 0x187

bash-3.00# ipnat -l
List of active MAP/Redirect filters:
map e1000g0 from 192.168.10.0/24 to yyy.yyy.yyy.130/32 port = 1024 -> xxx.xxx.xx.69/32 portmap tcp/udp 20400:20403 - application bank-client works correctly
map e1000g0 192.168.10.z/32 -> xxx.xxx.xx.69/32 -  my computer

excuse me for using the google translator. Thank you for your time and attention
Last edited by pludi; 06-15-2010 at 04:21 AM.. Reason: code tags, please...
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Solaris

A little help with ipfilter on Omnios

I'm on OmniOS. I have set a linux zone(lx zone) wich use 10.2.0.0/24 network. The other network,connected to internet is 192.168.0.0/24 The network interface of 10.2.0.0/24 is bge1 The network interface of 192.168.0.0/24 is bge0 I know is more easy to use the same network but i prefer to... (1 Reply)
Discussion started by: Linusolaradm1
1 Replies

2. Solaris

Ipfilter question

Howdy My goal is to block locally the applications on a Solaris 10 server to access specific port on a remote machine. All attempts to access the <remote ip>:<remote port> should be rejected with ICMP port unreachable or with TCP RST. I tried with the following: block... (2 Replies)
Discussion started by: ralome
2 Replies

3. Solaris

Solaris config files syntax

I have recently been told that on a Solaris 10 system # means default settings, and that ## indicates a comment. Therefore, the following setting in the etc/default/login file #RETRIES=5 indicates that the number of failed login attempts allowed is 5. Is this true or false? Should... (5 Replies)
Discussion started by: jclarkaz
5 Replies

4. Solaris

ipfilter blocking ip fragments

For some reason ipfilter is blocking inbound fragmented ip packets (the packets are larger than the interface's MTU) that are encapsulating UDP segments. The connection works, so I know ipfilter is letting some traffic through, it is just a lot slower than it should be. Rules that allow the... (3 Replies)
Discussion started by: ilikecows
3 Replies

5. Shell Programming and Scripting

Solaris bash syntax different from Linux?

I have a script that's meant to check the disk usage on a particular volume and delete the oldest logfile if it's over a certain percentage. It runs fine on a Linux machine, but on a Solaris one, I get this error: diskspace_check.sh: syntax error at line 3: `diskspace=$' unexpected I assume... (2 Replies)
Discussion started by: cara_k
2 Replies

6. Solaris

NAT IPFilter

Hi everybody, I'm running on Solaris 10 X86 (update 1009). I would like to make NAT's rule. I explain you. On Solaris, I configure the principal interface e1000g0 with IP : 192.168.0.33 I created the first logical interface like that : ifconfig e1000g0 addif 192.168.0.40 netmask... (0 Replies)
Discussion started by: aureliensm
0 Replies

7. Cybersecurity

questions about ipfilter

Dears, i am a new user for using ipfilter in solaris 10 and i have some question about this: by using ipfilter for example 1- i want specific MAC address able to access hotmail only 2- also i want to make 10MB for this MAC address is a max download per day 3- i am asking about using MAC... (0 Replies)
Discussion started by: coxmanchester
0 Replies

8. Shell Programming and Scripting

awk syntax for Solaris

Hi, Pass variable in SUN SOLARIS awk I have a file call text server1 10.0.0.2 When i use this awk command in Mac OS and Linux , everything works as expected. export HOSTNAME=server1 awk -v HOSTNAME=$HOSTNAME ' $1 ~ HOSTNAME { print $2 ; } ' text1 But when i entered the... (7 Replies)
Discussion started by: phamp008
7 Replies

9. Solaris

ipfilter solaris express

Hello, | am trying to setup ipfilter on solaris express snv_91 but I don't seem to have the following file available. /etc/ipf/pfil.ap Is this an older way of configuring the interface?, I have all the packages installed. Thanks, (1 Reply)
Discussion started by: Actuator
1 Replies

10. HP-UX

ipfilter hpux11.11

how can I create a rule that will allow my machine to FTP to itself, but not allow other machines to FTP to it.. I know this sounds weird but this how they want it so they can test some application functionality that uses ftp. (2 Replies)
Discussion started by: csaunders
2 Replies
Login or Register to Ask a Question