Date: Wed, 28 Aug 2002 09:08:59 +0200 (CEST) From: "Marcin Jessa" <yazzy@yazzy.org> To: <absinthe@pobox.com> Cc: <freebsd-isp@FreeBSD.ORG> Subject: Re: Port forwarding recommendations? Message-ID: <43677.80.232.16.66.1030518539.squirrel@www.yazzy.org> In-Reply-To: <200208270715.29162.absinthe@pobox.com> References: <200208270715.29162.absinthe@pobox.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi Dylan. Sounds like you need NAT. Both ipfw and ipf have this funcionality which is really easy to implement. I have written 2 'ipf and ipfw quick and dirty' howtos about this subject. Check out the FreeBSD section on www.ezunix.orgBtw, next time someone tells you to use some fancy web based (linux!) tool to configure your filrewall, put his email directly to /dev/null.Running a web server on a firewall... geez... Good luck. Cheers YazzY Dylan Carlson said: > Hi, > > There are volumes of mailing list messages out there on the subject of > firewalls, but the solutions for different circumstances are not clear. > Your recommendations would be appreciated. > > I have a simple low-end pentium box I want to do the following: > > - Firewall (ipfilter or ipfw, comfortable with either one) > - One external IP assigned via DHCP (from the ISP) > - One internal IP serving as a gateway address for a private class C - > NAT sharing to 4-5 hosts on the protected, internal subnet > - Inbound port forwarding > > ...where "port forwarding" means listening on a port on the external > interface of the firewall and forwarding to a specified internal host > for the rule. I have looked at [ /usr/ports/net/portfwd ] but I am > not sure how well/if this works with any of the NAT and firewall > implementations. > > Wondering which components you would use, why - and any caveats. I > would be thankful for any references as well. > > Provided I am successful with this I plan on writing up a procedure in > DocBook and and kicking it over to the FreeBSD documentation project. > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?43677.80.232.16.66.1030518539.squirrel>