help, ipf rule to reach a winxpBox in lan via gateway from www-server

[ronsen]

Hi All,
I should make a connection to a winxpBox in intranet.
Now I’m trying to find a rule to pass our gateway

Our lan:

Router 213.47.208.161
v
|
freebsdbox vr0 213.47.208.162

http://www-server

(firewall ipf)
v
| ed0 213.47.208.168
Gateway Freebsdbox firewall with ipf and nat
| ep0 192.168.1.1
|
|
winxpBox 192.168.1.91

on the

http://www-server

I run
route –n add 192.168.1.91/32 213.47.208.168

ping from

http://www-server

to 213.47.208.168 is ok
ping from

http://www-server

to 192.168.1.91 is ok
ping from gateway to 192.168.1.91 is ok
ping from winxBox to 213.47.208.168 is ok

How do I have to make the rule on

http://www-server

to reach the intranet
from 213.47.208.162 via 213.47.208.168 to 192.168.1.91 ?

I tried on the gateway
Pass in quick on ed0 proto tcp from 213.47.208.162 to any port > 1

Tia
Ron

 

[ronsen]

I found the solution the reason was nat. I start a net analyser on winxp and saw the gateway returns a reset because the session was turned over.