From owner-freebsd-questions@FreeBSD.ORG Tue May 30 11:04:24 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2C9AF16A41F for ; Tue, 30 May 2006 11:04:24 +0000 (UTC) (envelope-from ss650120@ms10.hinet.net) Received: from smtp2.cc.ncu.edu.tw (smtp2.cc.ncu.edu.tw [140.115.17.128]) by mx1.FreeBSD.org (Postfix) with ESMTP id B670043D46 for ; Tue, 30 May 2006 11:04:23 +0000 (GMT) (envelope-from ss650120@ms10.hinet.net) Received: from yatung (ds200.net.ncu.edu.tw [140.115.10.200]) by smtp2.cc.ncu.edu.tw (8.12.9/8.12.9/dove/0.0.4) with SMTP id k4UB4H0I025416; Tue, 30 May 2006 19:04:18 +0800 (CST) Message-ID: <000c01c683d8$ca03a950$c80a738c@yatung> From: =?big5?B?uLOm9sBz?= To: Cc: Date: Tue, 30 May 2006 19:04:13 +0800 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2869 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 X-osmtp-MailScanner-Information: Please contact the ISP for more information X-osmtp-MailScanner: Found to be clean X-Mailman-Approved-At: Tue, 30 May 2006 12:37:54 +0000 Content-Type: text/plain; charset="big5" Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: I have some questions about natd and firewall....^_^||| X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 May 2006 11:04:24 -0000 Hello: My English is not good. I am sorry about this first. ~_~ My system: FreeBSD + IPFW + NAT Question 1: about NAT (in FreeBSD) I built a "natd.conf" and it's contents are below: redirect_address 192.168.0.1 140.115.10.22 I have 2 computers in the LAN: 192.168.0.200 and 192.168.0.201. The redirect rule (above) will affect any connection which destination is 140.115.10.22. But, I don't want this rule to redirect the packets sent from 192.168.0.200.(ie. This rule will affect all nodes inside the LAN but 192.168.0.200) Can I make it? Question 2: about Firewall (in FreeBSD) Is there any argument in IPFW just like the function of the "redirect_address" in NAT can be used? If it is, I think it may can solve the above problem. I hope I can get your reply. Deeply appreciate ^_^ ~felix