Re: question on NAT + IPFW

2015-06-12 Thread Ian Smith
On Fri, 12 Jun 2015 10:24:05 +0200, Guido Falsi wrote: > On 06/12/15 10:07, Ian Smith wrote: > > On Fri, 12 Jun 2015 08:59:40 +0200, Guido Falsi wrote: > > > > > > looks correct, assuming xl0 is your internal interface (better put it > > in > > > > a variable and use the variable in your

Re: question on NAT + IPFW

2015-06-12 Thread Guido Falsi
On 06/12/15 10:07, Ian Smith wrote: > On Fri, 12 Jun 2015 08:59:40 +0200, Guido Falsi wrote: > > > > looks correct, assuming xl0 is your internal interface (better put it in > > > a variable and use the variable in your rules imho) > > > > Forgot one thing, working around this block is as eas

Re: question on NAT + IPFW

2015-06-12 Thread Ian Smith
On Fri, 12 Jun 2015 08:59:40 +0200, Guido Falsi wrote: > > looks correct, assuming xl0 is your internal interface (better put it in > > a variable and use the variable in your rules imho) > > Forgot one thing, working around this block is as easy as changing the > machine IP, teenager can le

Re: question on NAT + IPFW

2015-06-12 Thread Ian Smith
On Thu, 11 Jun 2015 19:49:06 -0700, John Reynolds wrote: > Hello all, I've read in sections 30.4.4 and 30.4.3 of the handbook about > using IPFW and I've got some clarification questions. > > 1) When you're using any sort of firewall rules outside the > open/client/simple/closed, etc. pre-ca

Re: question on NAT + IPFW

2015-06-12 Thread Guido Falsi
On 06/12/15 08:49, Guido Falsi wrote: > On 06/12/15 04:49, John Reynolds wrote: >> >> I have a situation where I need to just simply "block all traffic" from >> some teenagers' mobile devices after a certain period of the day (don't >> ask teenagers..). So, would that rule look like this:

Re: question on NAT + IPFW

2015-06-11 Thread Guido Falsi
On 06/12/15 04:49, John Reynolds wrote: > Hello all, I've read in sections 30.4.4 and 30.4.3 of the handbook about > using IPFW and I've got some clarification questions. > > 1) When you're using any sort of firewall rules outside the > open/client/simple/closed, etc. pre-canned types in rc.firewa

question on NAT + IPFW

2015-06-11 Thread John Reynolds
Hello all, I've read in sections 30.4.4 and 30.4.3 of the handbook about using IPFW and I've got some clarification questions. 1) When you're using any sort of firewall rules outside the open/client/simple/closed, etc. pre-canned types in rc.firewall, but instead using rules from a file, the way I