Jeremy Chadwick <[EMAIL PROTECTED]> writes: > On Thu, Oct 30, 2008 at 06:34:31PM -0500, Jack Barnett wrote: >> >> Ok, I had some progress with this last night. Basically what I do is: >> >> in natd - redirect_port 1000 to 10000 to the internal windows box. >> set ipfw to "open" file wall. >> >> Obviously this isn't prefect - but gives some idea of what's going on. >> >> What I'd like to do, is a) keep the nat redirects since that works >> pretty well. >> b) in ipfw, ONLY allow data back on these ports IF the windows box has >> established the connection out first then deny everything else. > > This is called "port triggering" in the residential router world. I > don't know how to do this on FreeBSD.
Stateful rules are the only way to do it. In fact, this is the main purpose of stateful rules. -- Lowell Gilbert, embedded/networking software engineer, Boston area http://be-well.ilk.org/~lowell/ _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"