Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 02 Aug 2007 18:14:36 -0700
From:      Julian Elischer <julian@elischer.org>
To:        Rudy Setiawan <rudal999@gmail.com>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: redirect traffic based on destination port to another interface
Message-ID:  <46B2817C.6010609@elischer.org>
In-Reply-To: <8b24e4de0708021606h5bbee266xb3a4814962d26643@mail.gmail.com>
References:  <8b24e4de0708021606h5bbee266xb3a4814962d26643@mail.gmail.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Rudy Setiawan wrote:
> Hi,
> 
> I am trying to do a traffic redirection based on destination port to
> another interface/gateway.
> Currently, I have a freebsd box that does simple NAT and an Internet connection.
> I am planning to install another internet connection and use the same
> box to do some traffic redirection.
> 
> 
> INTERNET1 -------- freebsd box ------- INTERNET2
>                                  |
>                                  |
>                        Local Area Network
> 
> LAN = 192.168.10.0/24 with interface em0
> INTERNET1-GW = x.x.x.1 with em1
> INTERNET2-GW = y.y.y.1 with rl0
> 
> My goal is to redirect any ssh traffic to INTERNET2-GW and I assume
> that if it can be redirected through INTERNET2-GW then the packets
> return will go through INTERNET2-GW also.
> 

no, unless you first NAT the packets with the address of that interface.
(otherwise the packets will come back through your primary network).
if yo have cheep dlink or linksys or whatever DSL routers or whatever with NAT
on them then you can use that successfully and just use ipfw 'fwd' rules to select the interface to use.


> Is it possible to do that way with ipfw or natd?

yes but you need both forwarding and nat..


> 
> Thank you
> 
> Regards,
> Rudy
> 
> 




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?46B2817C.6010609>