Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 25 May 2001 00:38:59 +0000
From:      Gunther Schadow <gunther@aurora.regenstrief.org>
To:        Roman <roman@e-lider.pl>
Cc:        freebsd-ipfw@FreeBSD.ORG
Subject:   Re: Simple problem?
Message-ID:  <3B0DA9A3.9BB41E8D@aurora.regenstrief.org>
References:  <000801c0e397$694b8e20$af01a8c0@bydgoski.pl>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
> Roman wrote:
> 
> My network:
> 
> 1. private 192.168.1.0/255.255.255.0
> 2. private 172.16.0.0/255.255.0.0
> 3. public 111.222.333.178/255.255.255.240
> 
> All request from 192. are going to public through masq on natd. It is OK.
> All hosts in 172. are out of masq.
> I'd like to make only one host in 192. ie. 192.168.1.166 to tcp connect from
> only one host from 172. ie. 172.16.100.100.
> 
> I think it is simple but i don't know how can I do it?

Roman, this is a clear RTFM issue. You can do it with IPFW, I did
things like that. It's a rule that starts with

$ipfw divert nat from $this to $that tcp port $suchandsuch

etc. I don't remember the syntax right, so RTFM ipfw(8). Behold,
this does not work with ipnat all so easily. IPFilter's ipnat
has far less powerful matching rules. It may work, but needs some
reseach.

-Gunther

-- 
Gunther Schadow, M.D., Ph.D.                    gschadow@regenstrief.org
Medical Information Scientist      Regenstrief Institute for Health Care
Adjunct Assistent Professor        Indiana University School of Medicine
tel:1(317)630-7960                         http://aurora.regenstrief.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?3B0DA9A3.9BB41E8D>