From owner-freebsd-ipfw@FreeBSD.ORG Tue Jan 31 07:27:05 2006 Return-Path: X-Original-To: freebsd-ipfw@freebsd.org Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A1D6716A420 for ; Tue, 31 Jan 2006 07:27:05 +0000 (GMT) (envelope-from esayer1@san.rr.com) Received: from ms-smtp-03-eri0.socal.rr.com (ms-smtp-03-qfe0.socal.rr.com [66.75.162.135]) by mx1.FreeBSD.org (Postfix) with ESMTP id 58C9E43D46 for ; Tue, 31 Jan 2006 07:27:05 +0000 (GMT) (envelope-from esayer1@san.rr.com) Received: from [192.168.1.29] (cpe-66-75-225-77.san.res.rr.com [66.75.225.77]) by ms-smtp-03-eri0.socal.rr.com (8.13.4/8.13.4) with ESMTP id k0V7R4nb010046 for ; Mon, 30 Jan 2006 23:27:04 -0800 (PST) Mime-Version: 1.0 (Apple Message framework v623) Content-Transfer-Encoding: 7bit Message-Id: <9265146a993aff85f3e21cbeb7e326a7@san.rr.com> Content-Type: text/plain; charset=US-ASCII; format=flowed To: freebsd-ipfw@freebsd.org From: Evan Sayer Date: Mon, 30 Jan 2006 23:27:04 -0800 X-Mailer: Apple Mail (2.623) X-Virus-Scanned: Symantec AntiVirus Scan Engine Subject: static nat + stateful X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jan 2006 07:27:05 -0000 Hello- I have done some research, and I didn't find a documented setup similiar to mine from which I could figure this out, so here goes. I have a quad port ethernet card, each port with a DHCP assigned public address. I would like to statically NAT each of these addresses to a server in my LAN, but also use stateful rules. Is this possible? What order do the check-state and divert rules have to go in for a static nat setup, and should there be a divert rule for each interface? -Thanks.