From owner-freebsd-security Thu Sep 16 8: 0:40 1999 Delivered-To: freebsd-security@freebsd.org Received: from pinochet.cityline.ru (pinochet.cityline.ru [195.46.160.34]) by hub.freebsd.org (Postfix) with ESMTP id 8264014F6D for ; Thu, 16 Sep 1999 08:00:24 -0700 (PDT) (envelope-from g16@mail.ru) Received: from admin (140.166.fx.dialup.cityline.ru [195.46.166.140]) by pinochet.cityline.ru (8.9.2/t/08-Oct-1998) with SMTP id SAA02548; Thu, 16 Sep 1999 18:53:55 +0400 (MSD) Message-ID: <001e01bf0053$7d1e8160$0801a8c0@admin.uzdw-centre.ru> Reply-To: "Oleg Y. Ivanov" From: "Oleg Y. Ivanov" To: "river" Cc: Subject: RE: mapping ports from outside to inside (with ipfw ?) Date: Thu, 16 Sep 1999 18:54:23 +0400 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0019_01BF0074.E41A5300" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.5 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_0019_01BF0074.E41A5300 Content-Type: text/plain; charset="windows-1251" Content-Transfer-Encoding: quoted-printable >I did that....it talks about the -redirec_address command, but it = applies as >mentioned to IP only....so all traffic would be destined for the = internal >machine....not just ONE port, which is what I am looking for=20 =20 what about -redirect_port ? =20 try this : =20 use_sockets yes same_ports yes deny_incoming no dynamic yes interface redirect_port : -------------------------------------------------------------------------= ------- Sincerely Yours , Oleg Y. Ivanov : sysadmin & DBA of UzDaewoo Centre , = Moscow=20 PGP fingerprint : EDDD D812 E895 FFF1 BA34 39A4 044E 6E8D 0C0E 64FC=20 ------=_NextPart_000_0019_01BF0074.E41A5300 Content-Type: text/html; charset="windows-1251" Content-Transfer-Encoding: quoted-printable

>I did that....it talks about the = -redirec_address command,=20 but it applies as
>mentioned to IP only....so all traffic would be = destined for the internal
>machine....not just ONE port, which is = what I=20 am looking for

what about -redirect_port ?

try this :

use_sockets yes
same_ports yes
deny_incoming=20 no
dynamic yes
interface = <your_outside_intf_here>

redirect_port <proto> =20 <internal_host>:<port> <external_port>

Sincerely Yours , Oleg Y.=20 Ivanov : sysadmin & DBA of UzDaewoo Centre , Moscow

PGP=20 fingerprint : EDDD D812 E895 FFF1 BA34 39A4 044E 6E8D 0C0E 64FC=20

------=_NextPart_000_0019_01BF0074.E41A5300-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message