Toomas Aas wrote:
Hello!
I have a fairly simple setup with internal network 192.168.14.0/24 and
one external IP. Gateway is running ipfilter 4.1.8.
Generally all traffic from internal network to the outside world is
allowed, but now I need to specifically restrict one internal IP so that:
http traffic from 192.168.14.92 to 12.34.56.78 is allowed
http traffic from 192.168.14.92 to 23.45.67.89 is allowed
http traffic from 192.168.14.92 to anywhere else is redirected to
12.34.56.78
Is this possible with ipnat/ipfilter? I thought I would need something
like
rdr fxp0 from 192.168.14.92/32 to ! (12.34.56.78/32, 23.45.67.89/32)
port = 80 -> 12.34.56.78 port 80
Not using a single rule.
You would use these rules:
rdr fxp0 from 192.168.14.92 to 12.34.56.78 port = 80 -> 0/0 port 80 tcp
rdr fxp0 from 192.168.14.92 to 23.45.67.89 port = 80 -> 0/0 port 80 tcp
rdr fxp0 from 192.168.14.92 to any port = 80 -> 12.34.56.78 port 80 tcp
Even if there was a address pool mechanism, for two addresses there is no
performance gain.
Darren
