From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 14 07:10:11 2012 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0808B1065673 for ; Wed, 14 Mar 2012 07:10:11 +0000 (UTC) (envelope-from remy.sanchez@hyperthese.net) Received: from relay4-d.mail.gandi.net (relay4-d.mail.gandi.net [217.70.183.196]) by mx1.freebsd.org (Postfix) with ESMTP id ACF048FC1E for ; Wed, 14 Mar 2012 07:10:10 +0000 (UTC) X-Originating-IP: 217.70.178.137 Received: from mfilter8-d.gandi.net (mfilter8-d.gandi.net [217.70.178.137]) by relay4-d.mail.gandi.net (Postfix) with ESMTP id 2976617207E for ; Wed, 14 Mar 2012 08:09:59 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mfilter8-d.gandi.net Received: from relay4-d.mail.gandi.net ([217.70.183.196]) by mfilter8-d.gandi.net (mfilter8-d.gandi.net [10.0.15.180]) (amavisd-new, port 10024) with ESMTP id 4KJe6MDqGHJe for ; Wed, 14 Mar 2012 08:09:57 +0100 (CET) X-Originating-IP: 122.174.46.111 Received: from magi.localnet (unknown [122.174.46.111]) (Authenticated sender: remy.sanchez@hyperthese.net) by relay4-d.mail.gandi.net (Postfix) with ESMTPSA id 62047172085 for ; Wed, 14 Mar 2012 08:09:56 +0100 (CET) From: =?ISO-8859-1?Q?R=E9my?= Sanchez To: freebsd-ipfw@freebsd.org Date: Wed, 14 Mar 2012 12:39:32 +0530 Message-ID: <8823954.VFuFedYPUb@magi> User-Agent: KMail/4.8.0 (Linux/3.2-pf; KDE/4.8.1; x86_64; ; ) In-Reply-To: <4F5A161C.8060407@herveybayaustralia.com.au> References: <4F5A161C.8060407@herveybayaustralia.com.au> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2457192.iggTx7bR6n"; micalg="pgp-sha1"; protocol="application/pgp-signature" Content-Transfer-Encoding: quoted-printable Subject: Re: newbie IPFW user X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2012 07:10:11 -0000 --nextPart2457192.iggTx7bR6n Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1" On Saturday 10 March 2012 00:39:24 Da Rock wrote: > I'm relatively new to IPFW, not FBSD; the last time I used IPFW (I > believe) was using 4.3. I'm now attempting to use IPFW for some tests= > (and hopefully move to production), and I'm trying to determine how I= > would setup binat using IPFW; or even if its possible at all. >=20 > I've been hunting some more in depth documentation, but it appears to= be > scarce/not definitive. I suspect using the modes in libalias such as > "use same ports" and "reverse" might be able to do what I'm looking f= or? >=20 > Any clarity much appreciated. > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.or= g" Well, what do you want to do with your firewall ? Because ipfw is kick-ass for QoS management, and is fairly simple to us= e in=20 other tasks, but if you want to do some complex NAT, it's going to be a= pain=20 in comparison to what pf offers. Just make sure of what your main requirement is :) My 2 cents, --=20 R=E9my Sanchez http://hyperthese.net/ --nextPart2457192.iggTx7bR6n Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEABECAAYFAk9gRCwACgkQpMMQ4XyIN1abiQCbB7GHG0Mfipe47t772uQY1/Yz aXsAmwcEl3wvhGNP5TAoAYZt3yZ0wdmS =Lhw2 -----END PGP SIGNATURE----- --nextPart2457192.iggTx7bR6n--