Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 1 Mar 2002 05:36:05 -0500 
From:      "Dang.Johnny" <Johnny.Dang@uwa.unitedway.org>
To:        "'Victor.Tayer@morganstanley.com'" <Victor.Tayer@morganstanley.com>, Baldur Gislason <baldur@foo.is>
Cc:        freebsd-ipfw@freebsd.org
Subject:   RE: ipfw and transparent proxy...
Message-ID:  <8493B346E1C1DC4A97C170F86C1C47F30296FD@msmail.unitedway.org>

next in thread | raw e-mail | index | archive | help
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_000_01C1C10C.E434ABF0
Content-Type: text/plain

The correct syntax is this:
ipfw add fwd 127.0.0.1,3128 tcp from 192.168.0.0/24 to not 192.168.0.0/24 80

You don't want to forward EVERYTHING, just port 80 (web traffic)
All you have to do is add 80 in the end of the line. God bless FreeBSD.



Yours In Service
++++++++++++++++++++++++++++++++++++
Johnny Dang johnny.dang@uwa.unitedway.org
Senior Network Engineer
MCP MCSE + 4.0 + Internet + 2K + XP + .NET
++++++++++++++++++++++++++++++++++++


-----Original Message-----
From: Victor Tayer [mailto:Victor.Tayer@morganstanley.com] 
Sent: Thursday, February 28, 2002 10:07 PM
To: Baldur Gislason
Cc: freebsd-ipfw@freebsd.org
Subject: Re: ipfw and transparent proxy...


i tried this setup. put it before my divert rules...
now im having problems with irc, icq and yahoo messenger. :(
am i missing something here?

victor tayer

Baldur Gislason wrote:

> put this before the divert rule(s)
> ipfw add fwd 127.0.0.1,3128 tcp from 192.168.0.0/24 to not 
> 192.168.0.0/24 Where 3128 is the port, default Squid setting.
>
> Baldur
>
> On Tuesday 26 February 2002 03:50, you wrote:
> > hello,
> >
> > i have been using ipfw/nat for quite some time now and
> > is very satisfied with its performance.
> >
> > just wondering how can i use transparent proxy when i'm also running 
> > natd on the same fbsd box.
> >
> > my box has 2 nics. my internal network is
> > 192.168.0.0/24 and a static public ip.
> > the box is running natd which works fine.
> >
> > can i do this setup with ipfw or ipfilter? any sample config is 
> > greatly appreciated.
> >
> > tnx in advance. :P
> >
> > victor "jett" tayer
> >
> >
> >
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-ipfw" in the body of the message
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-ipfw" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message


------_=_NextPart_000_01C1C10C.E434ABF0
Content-Type: application/octet-stream;
	name="Johnny Dang (johnny.dang@johnnydang.net).vcf"
Content-Disposition: attachment;
	filename="Johnny Dang (johnny.dang@johnnydang.net).vcf"

BEGIN:VCARD
VERSION:2.1
N:Dang;Johnny
FN:Johnny Dang (johnny.dang@johnnydang.net)
TITLE:Senior Network Engineer
TEL;WORK;VOICE:(703) 836-7122 #405
TEL;HOME;VOICE:(301) 439-3097
TEL;CELL;VOICE:(301) 332-8667
ADR;WORK;ENCODING=QUOTED-PRINTABLE:;;9304 Piney Branch Road =0D=0A#105;Silver Spring;MD;20903;United States of =
America
LABEL;WORK;ENCODING=QUOTED-PRINTABLE:9304 Piney Branch Road =0D=0A#105=0D=0ASilver Spring, MD 20903=0D=0AUnited S=
tates of America
URL;WORK:http://www.johnnydang.net
EMAIL;PREF;INTERNET:johnny.dang@johnnydang.net
REV:20011218T220101Z
END:VCARD

------_=_NextPart_000_01C1C10C.E434ABF0--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8493B346E1C1DC4A97C170F86C1C47F30296FD>