"mr. phreak" <[EMAIL PROTECTED]> writes:

> Hi, I am having trouble with my IPFW+NATD forwarding. I know a lot of
> people have
> and I've googled my ass off. Still I can't get it right. I'm trying to
> forward port 1213 in/out for dc++ usage.
> this is my setup:
>  __WAN router (
>  |
>  |
> (FreeBSD gateway/fw NIC1:ath0 (public) NIC2:rl0 (LAN) )
>  |
>  |__
>       LAN (
> I use stateful rules and I'd like to forward port 1213 both ways using
> natd. I know NATD should take care of this as long as i allow port
> 1213 in/out from the firewall. I've tried this at almost every
> position in the ipfw.rules and now i ask where i should put it?? i.e
> it's not there right now.
> I've tried:
> $cmd [num] allow all from any to any 1213 (at various positions in
> ipfw.rules) still doesn't work.
> $cmd [num] divert natd all from any to any 1213.
> Can someone help me?

Your firewall configuration is rather unconventional, but the basic
idea makes sense.  What isn't clear is how you want to use this "dc++"
program within your infrastructure.  Because you are using dynamic
rules, I assume that you want the connections to always originate
inside your network.  If that is the case, you shouldn't need any
special configuration to natd (because every connection will be
learned from the initial packet).  If that's not the case, you will
need to pick one internal machine to receive the connections coming in
from outside.
freebsd-questions@freebsd.org mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to