Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 Jan 2001 10:24:23 +1100
From:      Kal Torak <kaltorak@quake.com.au>
To:        cjclark@alum.mit.edu
Cc:        FreeBSD-stable <freebsd-stable@FreeBSD.ORG>
Subject:   Re: ipfw forwarding (more info)
Message-ID:  <3A74AA27.9E30C7C2@quake.com.au>
References:  <3A72CB47.7A5DD83@quake.com.au> <20010127220257.B28504@nevermind.kiev.ua> <3A732BE9.F559820D@quake.com.au> <3A732EFB.E7E743BA@quake.com.au> <20010127170621.M10761@rfx-216-196-73-168.users.reflex> <3A7411CF.816DA573@quake.com.au> <20010128132028.W10761@rfx-216-196-73-168.users.reflex>

next in thread | previous in thread | raw e-mail | index | archive | help
> > Yeah using the redirect_port option in natd works, but I dont understand
> > why it doesnt work with ipfw... I thought natd might be stopping, but even
> > having the fwd rule before the divert to natd rule doesnt change anything..
> > Dose ipfw fwd even work to remote machines?
> 
> Yes, it works. No, it does not work how you want it to. The 'fwd'
> directive does exactly what it says, it forwards a packet to some
> location. What it does NOT do is change the packet in any way. That
> is, when you forward a packet to another machine, the packet arrives
> at the next machine (or next hop on the way there) with the
> destination IP address unchanged from the original packet. I doubt the
> machine you are sending this to does anything with a packet not
> addressed to it.

Ahhh, now I see... And since the packet was addressed to the machine that
was forwarding it, it never actually went anywhere...
I had thought the fwd rule changed the destination address on the packet
not just the next hop address...

Since I was just trying to change where some udp data ended up I thought
that would be a good way since it doesnt need to be nat'd... The data would
arrive, the server would reply sending to the gateway which would perform nat
on the out going udp packets, then the clients would send more which would
go back to the server as if it was the gateway... Oh well it seemed like a
good idea at the time...

Thanks for clearing that up :)
Kal.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A74AA27.9E30C7C2>