Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 6 Mar 2005 19:07:28 +0000 (UTC)
From:      Jeff Penn <jeff+list+news@jrpenn.demon.co.uk>
To:        freebsd-questions@freebsd.org
Subject:   Re: Question about ipfw, natd and port forwarding.
Message-ID:  <slrnd2bb9u.1oni.jeff%2Blist%2Bnews@beastie.jrpenn.demon.co.uk>
References:  <20050225233650.X66135@sun.home.homeunix.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Deling Ren <lg+freebsd@home.homeunix.org>:
> Hi all, I am trying to setup a NAT box for my home network on freebsd 5.3.
> I am using ipfw and natd. I already got nat running but I am having
> problem with port forwarding. I am trying to forward port 80 on the nat
> box to an internal machine (192.168.0.7). I have the following as part of

> I have no problem connecting port 80 on the nat box from outside. But as I
> added stateful ipfw rules, it stops working. Running nmap from outside
> says port 80 is filtered. I am not sure how to configure the rules to
> enable port forwarding. Any help will be appreciated. Thanks.

> 00005 allow ip from any to any via $iif

This is a limitation of ipfw, nat cannot be used with keep-state rules.
If $iif above is ppp you can get around this by configuring ppp(8) to
perform nat.

Jeff



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?slrnd2bb9u.1oni.jeff%2Blist%2Bnews>