Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 06 Aug 2003 21:28:19 -0700
From:      boxend@swbell.net
To:        freebsd-questions@freebsd.org
Subject:   ipfw natd forward port 80
Message-ID:  <7ti3jvsotr2gdvbtsvb2a76l5p0hh6uduo@4ax.com>

next in thread | raw e-mail | index | archive | help

I want to forward port 80 from an outside ip to an internal ip of
192.168.1.150 dc1 is tun0  pppoe / dc0 is lan=20
I have read what seems like 5 diff ways to do this but the only=20
result has been to lock myself out of the computer.
What have I missed.
rc.conf settings
firewall_enable=3D"YES"
firewall_script=3D"/etc/firewall/fwrules"
firewall_quiet=3D"YES" =20
firewall_logging_enable=3D"YES"
#log_in_vain=3D"YES"
tcp_drop_synfin=3D"NO"=20
tcp_restrict_rst=3D"NO"=20
icmp_drop_redirect=3D"YES"
natd_enable=3D"YES"
natd_interface=3D"tun0"
natd_flags=3D"-dynamic"
gateway_enable=3D"YES"
ppp_enable=3D"YES"
ppp_mode=3D"ddial"
ppp_profile=3D"default"

 ipfw show
00050 fwd 192.168.1.150,80 tcp from any to 192.168.1.150 in via tun0
00100 divert 8668 ip from any to any via tun0
00200 allow ip from any to any via lo0
00300 allow ip from any to any via dc0
00400 allow tcp from any to any out xmit tun0 setup
00500 allow tcp from any to any via tun0 established
00600 allow tcp from any to any dst-port 25 setup
00800 allow tcp from any to any dst-port 22 setup
01000 allow udp from any to x.x.x.x dst-port 53 out xmit tun0
01100 allow udp from x.x.x.x 53 to any in recv tun0
01200 allow icmp from any to any
01300 deny log ip from any to any
65535 allow ip from any to any

from httpd.conf
Listen 192.168.1.150:80
ServerName my.lameass.com:80
((  changed to protect me from my ignorance =3D)  ))



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?7ti3jvsotr2gdvbtsvb2a76l5p0hh6uduo>