Let's make some assumptions:
fxp0 is your external NIC - external IP address
fxp1 is your internal NIC, ip address 192.168.0.254.
You want to redirect any traffic from your internal LAN heading to the outside world on port 110, to your localhost to where the special POP3 filter daemon is listening.
cat /etc/ipnat.rules
rdr fxp1 0.0.0.0/0 port 110 -> 192.168.0.254 port 8110
ipnat -CF -f /etc/ipnat.rules
(You should also create a ipfilter rule to allow this traffic, probably only TCP).
Regards,
Dave Seddon
Fabrice writes:
Dave+Seddon a �crit :
Greetings,
Are you sure the ipfilter module is loaded, or built into the kernel? That error looks a lot like it's not.
Also, please post the example IPFW rules, and we'll easily confirm the conversion to ipf.
The example is :
ipfw add fwd 192.168.0.254,8110 tcp from 192.168.0.0/24 to any pop3
Regards
FAbrice
Regards,
Dave Seddon
Fabrice writes:
Hi,
This week, I 've installed P3Scan package on a FreeBSD 4.9R to filter pop3 (for viruses) through my firewall.
The description of the P3Scan package explain how to use with ipfw, but no with IPFilter.
P3Ssan listen on the 8110 port, so I've tried to do :
map external_interface internal_lan/24 -> external_address/32 proxy port 8110 pop3/tcp
but ipnat doesn't like this rule :
1:ioctl(SIOCADNAT): No such file or directory
How can I do to filter transparently pop3 with IPF ?
Thanks
FAbrice
