Re: NAT Port Forward problem in a not so simple network

[Fabio De Paolis <fabiodepaolis@naxe.it>]

Grant Taylor ha scritto:
> On 04/15/08 04:48, Fabio De Paolis wrote:
>> I have a service that runs on a server that has no public IP, another 
>> server with the public IP should forward the port to it.
>
> Let's break this down in to the simple network flow before trying to 
> make things work (namely to make sure I understand what you are 
> wanting to do).
>
> Let's do a re-draw with some clarifications.
>
>  Note:  References to "External" (e) interfaces will be facing up and 
> "Internal" (i) interfaces will be facing down.
>
> I'm presuming (for the sake of discussion) that you presently you have 
> globally routable services that appear to be on one or more Ae 
> addresses that are port forwarded to Ce (and possibly others).
>
> Now it sounds like you are wanting to port forward (one or more of) 
> said service(s) from Ce to De with out changing any thing on A.  So 
> the traffic flow would be from client Z to Ae to Ce to De and back in 
> the same direction.
>
> I'm also guessing that you would like all systems to have the 
> capability (whether or not you use it or firewall it is up to you) to 
> connect to Ce and have the connection be port forwarded to De.  Correct?
>
> Before I go in to how to do this, please let me know if I'm on track 
> or not.
>
>
Absoluttely CORRECT, your description is very very good.

Another goal should be to minimize traffic on C for service running on D.