Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 03 Feb 2005 16:33:48 -0700
From:      Brett Glass <brett@lariat.org>
To:        net@freebsd.org
Subject:   Does the Cisco PIX have an equivalent of the IPFW "fwd" action?
Message-ID:  <6.2.1.2.2.20050203162558.086feaa8@localhost>

next in thread | raw e-mail | index | archive | help
I'm setting up a FreeBSD transparent Web proxy for a client which has an old 
(vintage 1998) Cisco PIX firewall router. I know how to make the proxy accept 
packets forwarded to it (even though the destination IP addresses of those
packets will not be that of the proxy machine itself) and do transparent caching. 
However, to complete the puzzle, I need to make the client's PIX firewall forward 
outbound packets destined for port 80 (regardless of IP address) to the proxy. I 
can't seen to find the magic incantation in Cisco's online docs. Does anyone here 
know the Cisco equivalent of the IPFW "fwd" action, (which changes the "next hop" 
MAC address of a packet if it meets the criteria specified in a rule) and how to 
write a rule for the PIX to forward the packets? Help would be much appreciated.

--Brett Glass



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6.2.1.2.2.20050203162558.086feaa8>