execution sequance of IPFW/IPFILTER when used together

2003-01-13 Thread JoeB
Informational post for the archives

From  [EMAIL PROTECTED]  who wrote
We actually found it goes:

Internal private Net - NIC - IPF+NAT - IPFW - Public internet
World

Public internet World - IPF+NAT - IPFW - NIC - Internal Private
net


Suffice to say, IPF+NAT always sees the packets first

This is way to use ipfilter to perform the nat function and ipfw
dummynet



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: execution sequance of IPFW/IPFILTER when used together

2003-01-13 Thread Stephen Hilton
On Mon, 13 Jan 2003 14:40:18 -0500
JoeB [EMAIL PROTECTED] wrote:

 Informational post for the archives
 
 From  [EMAIL PROTECTED]  who wrote
 We actually found it goes:
 
 Internal private Net - NIC - IPF+NAT - IPFW - Public internet
 World
 
 Public internet World - IPF+NAT - IPFW - NIC - Internal Private
 net
 
 
 Suffice to say, IPF+NAT always sees the packets first
 
 This is way to use ipfilter to perform the nat function and ipfw
 dummynet

There was also some comments regarding this sequence changing 
depending on whether IPF or IPFW are compiled in the kernel or 
loaded as modules, does this have any affect on this rule ?

Regards,

Stephen Hilton
[EMAIL PROTECTED]

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message