From what you've said you have natd enabled,instead of redirecting with ipfw you shoud redirect with natd!man natd
On Mon, 16 Jun 2003 09:41:05 +1000 Andrew Thomson <[EMAIL PROTECTED]> wrote: > On Fri, Jun 13, 2003 at 09:47:09AM -0400, Bill Moran wrote: > > > > Yes. You've got the right idea. > > > > hmm.. i have encountered some difficulties ;) so now i'm seeking some > more advice.. > > i have the following rules on my firewall: > > 10561 skipto 11000 ip from 192.168.1.2 to any > 10562 fwd 192.168.1.2,3128 tcp from 192.168.1.3 to any 80 > > keeping in line with my example, 1=fwall, 2=squid, 3=user > > the skipto is in there so we go through nat and get a proper ip. > > i never see any packets get to the squid box though.. > > ipfw show indicates matching packets > ipfw show 10561 10562 > 10561 5342 331306 skipto 11000 ip from 192.168.1.2 to any > 10562 2520 120960 fwd 192.168.1.2,3128 tcp from 192.168.1.3 to any 80 > > a tcpdump on the squid box looking out for port 3128 shows nothing, although > the ipfw shows matches.. > > i'll keep digging around but any more tips would be appreciated on this > setup. > > thanks, > > andrew. > > > > _______________________________________________ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"