From owner-freebsd-questions@FreeBSD.ORG Wed Dec 2 21:40:11 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9983F106566B for ; Wed, 2 Dec 2009 21:40:11 +0000 (UTC) (envelope-from kes-kes@yandex.ru) Received: from forward10.mail.yandex.net (forward10.mail.yandex.net [77.88.61.49]) by mx1.freebsd.org (Postfix) with ESMTP id 4D0AD8FC0A for ; Wed, 2 Dec 2009 21:40:11 +0000 (UTC) Received: from smtp8.mail.yandex.net (smtp8.mail.yandex.net [77.88.61.54]) by forward10.mail.yandex.net (Yandex) with ESMTP id C4C421320952; Thu, 3 Dec 2009 00:39:31 +0300 (MSK) Received: from HOMEUSER (unknown [77.93.42.18]) by smtp8.mail.yandex.net (Yandex) with ESMTPA id 7A2039809E; Thu, 3 Dec 2009 00:39:31 +0300 (MSK) X-Nat-Received: from [192.168.13.6]:2360 [ident-empty] by SPAM FILTER: with TPROXY id 1259790230.39200 abuse-to kes-kes@yandex.ru Date: Wed, 2 Dec 2009 23:39:35 +0200 From: =?koi8-r?B?68/O2MvP1yDl18fFzsnK?= X-Mailer: The Bat! (v4.0.24) Professional Organization: =?koi8-r?B?/vAg68/O2MvP1ywgRnJlZUxpbmU=?= X-Priority: 3 (Normal) Message-ID: <1235656966.20091202233935@yandex.ru> To: Chuck Swiger In-Reply-To: <62A5826A-19D7-4743-B95E-28FF7777776A@mac.com> References: <83917882.20091202221037@yandex.ru> <62A5826A-19D7-4743-B95E-28FF7777776A@mac.com> MIME-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 8bit X-Yandex-TimeMark: 1259789971 X-Yandex-Spam: 1 X-Yandex-Front: smtp8.mail.yandex.net X-Mailman-Approved-At: Wed, 02 Dec 2009 21:45:06 +0000 Cc: freebsd-questions@freebsd.org Subject: Re[2]: How to change dst IP in packet with IPFW X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: =?koi8-r?B?68/O2MvP1yDl18fFzsnK?= List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Dec 2009 21:40:11 -0000 Здравствуйте, Chuck. Вы писали 2 декабря 2009 г., 22:28:23: CS> On Dec 2, 2009, at 12:10 PM, Коньков Евгений wrote: >> Can I change dst IP in packet with IPFW? CS> Normally this was done using natd's redirect_address capability. CS> In newer versions of FreeBSD, IPFW has grown internal support for CS> doing nat redirects without using the userland natd; for example, CS> see "NETWORK ADDRESS TRANSLATION (NAT)" in the 8.0 IPFW manpage: CS> http://www.freebsd.org/cgi/man.cgi?query=ipfw&sektion=8 CS> Regards, It says nothing about proxy_rule, it just mention about proxy_only can any give examples how to use it? I need next. packet goes from LAN to INET I need ip of INET change to LAN2 ip send packet to LAN2 and get answer change LAN2 ip to INET ip send packet to LAN from INET same as usual NAT but change dst IP instead of src IP -- С уважением, Коньков mailto:kes-kes@yandex.ru