Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Apr 2008 13:48:50 +0500
From:      "Fazal Ahmed Malik" <fam@solacetel.com>
To:        <freebsd-net@freebsd.org>
Subject:   Web server behind ipfw firewall
Message-ID:  <200804210752.m3L7qdLG028833@ns1.sky.net.pk>

next in thread | raw e-mail | index | archive | help
Hi,

 

I need help for setting up web server behind IPFW firewall. I have Freebsd
6.0 working as router on LAN with transparent squid. Now I want to setup web
server to be running on private IP please help me in writing IPFW rules to
serve the purpose. Current IPFW rules are as under,

 

 

$fwcmd add divert natd all from any to any via vr0

$fwcmd add fwd $external_ip,8080 tcp from not me to any 80

#$fwcmd add fwd $internal_ip log tcp from any to me dst-port 80 in via vr0

#$fwcmd add fwd $internal_ip tcp from any to me dst-port 80 out via re0

$fwcmd add allow log tcp from any to any in tcpflags syn,fin

$fwcmd add check-state

$fwcmd add allow tcp from any to any out keep-state

$fwcmd add allow tcp from any to any via vr0 established

$fwcmd add allow tcp from any to any 21 setup

$fwcmd add allow tcp from any to any 22 setup

$fwcmd add allow tcp from any to any 23 setup

$fwcmd add allow tcp from any to any 43 setup

$fwcmd add allow tcp from any to me 80 setup

$fwcmd add allow tcp from any to any 110 setup

$fwcmd add allow tcp from any to any 143 setup

$fwcmd add allow tcp from any to any 443 setup

$fwcmd add allow tcp from any to any 789 setup

$fwcmd add reset log tcp from any to any 113 in recv vr0

$fwcmd add allow udp from any to any 53 out xmit vr0

$fwcmd add allow udp from any 53 to any in recv vr0

$fwcmd add 03000 allow icmp from me to any

$fwcmd add 04000 allow icmp from any to any

 

Thanks,

 

 

Fazal

 

 


No virus found in this outgoing message.
Checked by AVG. 
Version: 7.5.524 / Virus Database: 269.23.2/1388 - Release Date: 4/20/2008
3:01 PM
 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200804210752.m3L7qdLG028833>