Hi Richard,
On Sun, Dec 28, 2008 at 2:30 AM, Richard Yang wrote:
> thank you, usleep (nice name)i somehow made it work by
> 1. add "redirect_port udp 10.0.0.200:5 5" in natd.conf
> 2. allow all traffic and diversion in ipfw.rules
>
> i tried to limit the traffic by modifying the rules in
thank you, usleep (nice name)i somehow made it work by
1. add "redirect_port udp 10.0.0.200:5 5" in natd.conf
2. allow all traffic and diversion in ipfw.rules
i tried to limit the traffic by modifying the rules in ipfw.rules,
but unsuccessfully. so i just leave it be at this moment.
i am v
Hi Ricard,
On Fri, Dec 26, 2008 at 9:27 PM, Richard Yang wrote:
> hi,
> i have a ssh machine behind a freebsd firewall with nat and ipfw.
> how do i make port forwarding so internet can access the ssh machine?
> thanx
>
i think you need to configure /etc/ipnat.conf ( read 'man ipnat' ). this is
"Richard Yang" writes:
> i have a ssh machine behind a freebsd firewall with nat and ipfw.
> how do i make port forwarding so internet can access the ssh machine?
Use 'redirect_port' with natd(8).
This is extensively documented in the Handbook:
http://www.freebsd.org/doc/en/books/handbook/networ
Hello Friend
First I agree with you the FBSD handbook documentation on firewall
software sucks big time. It leads the reader into believing that
ipfw is the only solution when it is not. FBSD is delivered with
ipfw and IPFILTER which are both firewall software applications. The
second thing that t
On Friday, October 24, 2003, at 02:35 AM, Alhagie Puye wrote:
Do you have a natd.conf file? What does your rc.conf
file look like? You have to turn on nat for the
packets to be translated. Telling the firewall to send
the packets to natd is one thing, what the happens to
them after that is another
Do you have a natd.conf file? What does your rc.conf
file look like? You have to turn on nat for the
packets to be translated. Telling the firewall to send
the packets to natd is one thing, what the happens to
them after that is another. You ARE missing the setup
for natd.
Check this out:
http://
