Date: Thu, 11 Apr 2002 16:03:31 -0400 From: Matt Simerson <freebsd@blockads.com> To: Julian Elischer <julian@elischer.org> Cc: freebsd-hackers@freebsd.org Subject: Re: Is natd the right tool? Message-ID: <3242764A-4D87-11D6-8065-00306553B5E4@blockads.com> In-Reply-To: <Pine.BSF.4.21.0204111038360.65137-100000@InterJet.elischer.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday, April 11, 2002, at 01:39 PM, Julian Elischer wrote: > check out ipfw's 'fwd' command Cool, never realized that was there. So, I tried it: I recompiled my kernel after adding IPFIREWALL_FORWARD to it. Then: ipfw add fwd 127.0.0.2,53 udp from any to 192.168.7.251 55 ipfw add fwd 127.0.0.2,53 tcp from any to 192.168.7.251 55 matt# ipfw show 00100 4 228 fwd 127.0.0.2,53 udp from any to 192.168.7.251 55 00200 0 0 fwd 127.0.0.2,53 tcp from any to 192.168.7.251 55 65535 528096 456266843 allow ip from any to any (I use DEFAULT_TO_ACCEPT) xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 options=3<rxcsum,txcsum> inet 192.168.7.251 netmask 0xfffffe00 broadcast 192.168.7.255 ether 00:01:02:38:2b:c7 media: Ethernet autoselect (100baseTX <full-duplex>) status: active lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384 inet6 ::1 prefixlen 128 inet 127.0.0.1 netmask 0xff000000 inet 127.0.0.2 netmask 0xffffffff DNS server still serves happily off 127.0.0.2: matt# dig www.foo.com @127.0.0.2 ; <<>> DiG 8.3 <<>> www.foo.com @127.0.0.2 <snip> ;; ANSWER SECTION: www.foo.com. 1D IN A 207.89.154.94 <snip> But it still won't serve off my external interface: matt# dig -p55 www.foo.com @192.168.7.251 ; <<>> DiG 8.3 <<>> -p55 www.foo.com @192.168.7.251 ; (1 server found) ;; res options: init recurs defnam dnsrch ;; res_nsend to server 192.168.7.251: Connection refused What am I missing? Matt To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3242764A-4D87-11D6-8065-00306553B5E4>