Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Jul 2001 18:06:09 -0500 (CDT)
From:      Nick Rogness <nick@rogness.net>
To:        Julian Elischer <julian@elischer.org>
Cc:        Peter Warrick <peter@guest-tek.com>, freebsd-net@FreeBSD.ORG
Subject:   Re: IPFW and NATD
Message-ID:  <Pine.BSF.4.21.0107101804330.51639-100000@cody.jharris.com>
In-Reply-To: <Pine.BSF.4.21.0107101613000.54942-100000@InterJet.elischer.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 10 Jul 2001, Julian Elischer wrote:

> 
> 
> On Tue, 10 Jul 2001, Nick Rogness wrote:
> > 	You need to add another rule:
> > 
> > 	ipfw add divert natd all from $PUBLIC_IP to any in via en0
>                                           ^          ^
>                                           \----------/
>                                        swap these
> 
> 
> > 
> > 	The $PUBLIC_IP should be the IP of en0.  This will only work if
> > 	your non-diverted traffic is using a different public IPs...which
> > 	I'm assuming you are.
> 
> OR you don NOT want other machines to be able to get out.

	Ooops...yep he's right...relized that after I read Julian's
	original response.


Nick Rogness <nick@rogness.net>
 - Keep on Routing in a Free World...
  "FreeBSD: The Power to Serve!"


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0107101804330.51639-100000>