Re: NATD & IPFW

2006-05-07 Thread Andrew Pantyukhin
On 5/6/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: I cant seem to get something working and would really appreciate some h elp. I use IPFW and have used NAT in the past through the ipfw "divert" rules. But what i need to get right is simply nat for a particular host inter

NATD & IPFW

2006-05-06 Thread [EMAIL PROTECTED]
I cant seem to get something working and would really appreciate some h= elp. I use IPFW and have used NAT in the past through the ipfw= "divert" rules. But what i need to get right is simply nat for a = particular host internally to a external mail server. Now i ca= n nat all

natd + ipfw, multiple public address routing...

2004-02-06 Thread Hambalek Regis CH [FAT]
Dear all, hello! As my first post I would like to seek some help :) I'm currently installing a bsd firewall to replace a cisco router for the filtering and NAT. Our network is composed of several server having a public IP each on the net. Ihave managed with natd to make the entries from intern

Re: natd + ipfw question

2003-12-24 Thread Luigi Rizzo
On Wed, Dec 24, 2003 at 08:39:45AM -0500, Leo Bicknell wrote: ... > Now that I've used IPFW2 for something more complicated than simple > host filtering I see that the syntax and structure makes something > like a firewall/nat box for any moderately interesting config way > too complicated with way

Re: natd + ipfw question

2003-12-24 Thread Leo Bicknell
Original broken case: In a message written on Tue, Dec 23, 2003 at 03:17:12PM -0500, Leo Bicknell wrote: > > ipfw add 1000 divert natd ip from any to any recv fxp0 > > ipfw add 1001 divert natd ip from any to any xmit fxp0 In a message written on Tue, Dec 23, 2003 at 12:28:09PM -0800, Luigi Riz

Re: natd + ipfw question

2003-12-24 Thread Luigi Rizzo
On Tue, Dec 23, 2003 at 03:17:12PM -0500, Leo Bicknell wrote: ... > I must not be clear on what "in" "out" "recv" and "xmit" mean, and > after reading the manual page 3 times I'm now even more confused. The names are reasonably intuitive... "in" matches packets on the INput path (basic

Re: natd + ipfw question

2003-12-23 Thread Leo Bicknell
Well, I found the solution to my problem by random chance (futzing with other things), and it still doesn't make sense. Works: > ipfw add 1000 divert natd ip from any to any via fxp0 Doesn't work: > ipfw add 1000 divert natd ip from any to any recv fxp0 > ipfw add 1001 divert natd ip from any

Re: natd + ipfw question

2003-12-23 Thread Bruce M Simpson
On Tue, Dec 23, 2003 at 11:54:39AM -0500, Leo Bicknell wrote: > doesn't? Yes, I want to do something fancier treating inbound and > outbound traffic differently, but this basic case doesn't seem to > work, and it seems to me like it should. What am I missing? Have you configured IPFW2 (if runnin

natd + ipfw question

2003-12-23 Thread Leo Bicknell
Can someone explain to me why: ipfw add 1000 divert natd ip from any to any via fxp0 works, and yet: ipfw add 1000 divert natd ip from any to any recv fxp0 ipfw add 1001 divert natd ip from any to any xmit fxp0 doesn't? Yes, I want to do something fancier treating inbound and outbound traffic