Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 16 May 2001 21:29:14 -0700
From:      craig burgess <craig-burgess@.home.net>
To:        freebsd-questions@FreeBSD.ORG
Subject:   begging assistance: natd/firewall port config
Message-ID:  <3B03539A.E9C2C4FF@.home.net>

next in thread | raw e-mail | index | archive | help
IPFIREWALL statements are compiled into the kernel and natd basically
works -- ftp and browsers work seamlessly.

I have tried various permutations of ipfw statements in rc.firewall
without success. Some are shown below. I need to enable tcp on ports
2050 and 2051. The more i read man pages the more confused i get.

/etc/services
  teletrac	2050/tcp	#teletrac
  teletrac	2051/tcp	#teletrac

/etc/rc.conf:
  natd_enable="YES"
  natd_interface="xl0"
  natd_flags="-s -m"
  firewall_enable="YES"
  firewall_type="OPEN"

/etc/rc.firewall:
  # Prototype setups.
  if [ "${firewall_type}" = "open" -o "${firewall_type}" = "OPEN" ];
then

  $fwcmd add 300 allow any from 192.168.0.130 to 208.19.xxx.xxx
  ##$fwcmd add 400 allow tcp from any to any 2051 setup
  ##$fwcmd add 65001 pass tcp from any to any established
  ##$fwcmd add 65002 pass tcp from 208.19.xxx.xxx to
192.168.0.130:255.255.255.0

  $fwcmd add 65000 pass all from any to any
 
  elif [ "${firewall_type}" = "client" ]; then ....

thanks in advance

craig

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B03539A.E9C2C4FF>