here's a few of the iptables rules i'm staring at (yeah, i obfuscated the public ip):

-A PREROUTING -i eth1 -p tcp -m tcp --dport 10236 -j DNAT --to-destination 1.2.3.103:443 -A PREROUTING -i eth1 -p tcp -m tcp --dport 10238 -j DNAT --to-destination 1.2.3.104:443 -A PREROUTING -i eth1 -p tcp -m tcp --dport 10183 -j DNAT --to-destination 1.2.3.105:443
[...]

is the ipf equivalent obvious to anyone out there?

Absolutely, and it works like a charm.

/etc/opt/ipf/ipnat.conf needs to be created. Inside of this file, you'll need to use the RDR directive.

Unfortunately as I don't have access to the FW from this system, I can't provide an example, but do look at ipnat.conf man pages, examples are provided there.


Reply via email to