Date: Mon, 21 May 2001 12:06:46 -0700 From: craig burgess <craig-burgess@home.net> To: freebsd-questions@FreeBSD.ORG Subject: Re: begging assistance: natd/firewall port config Message-ID: <3B096746.38E13A34@home.net> References: <3B03539A.E9C2C4FF@.home.net>
next in thread | previous in thread | raw e-mail | index | archive | help
in case anyone else needs to know -
the solution for this case was:
'natd -s -m -n xl0 -redirect_port tcp 192.168.0.130:2050-2051 2050-2051'
here the firewall type is OPEN - and needs NO adjustments; don't touch
it.
craig
craig burgess wrote:
>
> IPFIREWALL statements are compiled into the kernel and natd basically
> works -- ftp and browsers work seamlessly.
>
> I have tried various permutations of ipfw statements in rc.firewall
> without success. Some are shown below. I need to enable tcp on ports
> 2050 and 2051. The more i read man pages the more confused i get.
>
> /etc/services
> teletrac 2050/tcp #teletrac
> teletrac 2051/tcp #teletrac
>
> /etc/rc.conf:
> natd_enable="YES"
> natd_interface="xl0"
> natd_flags="-s -m"
> firewall_enable="YES"
> firewall_type="OPEN"
>
> /etc/rc.firewall:
> # Prototype setups.
> if [ "${firewall_type}" = "open" -o "${firewall_type}" = "OPEN" ];
> then
>
> $fwcmd add 300 allow any from 192.168.0.130 to 208.19.xxx.xxx
> ##$fwcmd add 400 allow tcp from any to any 2051 setup
> ##$fwcmd add 65001 pass tcp from any to any established
> ##$fwcmd add 65002 pass tcp from 208.19.xxx.xxx to
> 192.168.0.130:255.255.255.0
>
> $fwcmd add 65000 pass all from any to any
>
> elif [ "${firewall_type}" = "client" ]; then ....
>
> thanks in advance
>
> craig
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B096746.38E13A34>