From owner-freebsd-ipfw@FreeBSD.ORG  Thu Sep 14 21:13:18 2006
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
X-Original-To: freebsd-ipfw@freebsd.org
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F029B16A412
	for <freebsd-ipfw@freebsd.org>; Thu, 14 Sep 2006 21:13:18 +0000 (UTC)
	(envelope-from 1090046@mail.ru)
Received: from f61.mail.ru (f61.mail.ru [194.67.57.95])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 932AF43D46
	for <freebsd-ipfw@freebsd.org>; Thu, 14 Sep 2006 21:13:18 +0000 (GMT)
	(envelope-from 1090046@mail.ru)
Received: from mail by f61.mail.ru with local id 1GNyWK-000CxJ-00
	for freebsd-ipfw@freebsd.org; Fri, 15 Sep 2006 01:13:16 +0400
Received: from [85.140.1.198] by win.mail.ru with HTTP;
	Fri, 15 Sep 2006 01:13:16 +0400
From: Al Lad <1090046@mail.ru>
To: freebsd-ipfw@freebsd.org
Mime-Version: 1.0
X-Mailer: mPOP Web-Mail 2.19
X-Originating-IP: [85.140.1.198]
Date: Fri, 15 Sep 2006 01:13:16 +0400
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 8bit
Message-Id: <E1GNyWK-000CxJ-00.1090046-mail-ru@f61.mail.ru>
X-Mailman-Approved-At: Thu, 14 Sep 2006 21:14:23 +0000
Subject: FreeBSD 5.5 - stable IPFW FWD to {another ip} doesn't work even
	with 5.3 beta patch
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Al Lad <1090046@mail.ru>
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Sep 2006 21:13:19 -0000


>> Environment:
> FreeBSD gate.club4x4.ru 5.5-STABLE FreeBSD 5.5-STABLE #0: Wed Sep 13 02:07:28 MSD 2006
>> Description:
> KERN ->options IPDIVERT
> options IPFIREWALL
> options IPFIREWALL_FORWARD
> options IPFIREWALL_FORWARD_EXTENDED
> rc.conf -> firewall_enable=yes gateway_enable=yes firewall_script=/etc/rc.fire
> ifconfig_fxp0="inet 192.168.100.4  netmask 255.255.255.0"
> 
> rc.fire -> 
> ipfw add 88 fwd 192.168.100.3,3128 tcp from 192.168.100.0/24 to any 80,81,8000
> ipfw add 89 fwd 192.168.100.3,3128 tcp from 192.168.100.0/24 to any 8001-9000
> 
> ipfw show -> 
> 00088    6034     410828 fwd 192.168.100.3,3128 tcp from 192.168.100.0/24 to any dst-port 80,81,8000
> 00089    3132     382127 fwd 192.168.100.3,3128 tcp from 192.168.100.0/24 to any dst-port 8001-9000
> 
> But on machine 192.168.100.3 i'v got nothing  - all config was accurate working on  free 4.8 - 4.11. update was done through backup configuration (rc.conf &
> etc) then  full new install & kernel reassembling - IPFW FWD doesn't work!