Didn't get an answer for this. Is it because it's supposed to be asked
in freebsd-current?

I've found that natd with ipfw2 breaks my simple ipfw rules in which
state information is kept for new outgoing tcp packets:

with 0,1.. as example rule numbers.

0 divert natd all from any to any via tun0
1 allow tcp from any to any out xmit tun0 setup
2 allow tcp from any to any via tun0 established
3 allow icmp from any to any

0 is ok
1 is ok
3 is ok
but 2 doesn't work.

I read in the man, that natd might lose information that might cause
rule 2 to break. 

What's the proper way to do this with ipfw2?



-- 
Khairil Yusof <[EMAIL PROTECTED]>

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to