From owner-freebsd-questions  Tue Feb 13 11: 6: 0 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from cody.jharris.com (cody.jharris.com [205.238.128.83])
	by hub.freebsd.org (Postfix) with ESMTP id A207237B4EC
	for <freebsd-questions@FreeBSD.ORG>; Tue, 13 Feb 2001 11:05:57 -0800 (PST)
Received: from localhost (nick@localhost)
	by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f1DJSd396743;
	Tue, 13 Feb 2001 13:28:40 -0600 (CST)
	(envelope-from nick@rogness.net)
Date: Tue, 13 Feb 2001 13:28:39 -0600 (CST)
From: Nick Rogness <nick@rogness.net>
X-Sender: nick@cody.jharris.com
To: John Heyer <john@snake.supranet.net>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: natd -reverse
In-Reply-To: <Pine.BSF.4.21.0102131228590.27343-100000@snake.supranet.net>
Message-ID: <Pine.BSF.4.21.0102131316480.92630-100000@cody.jharris.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Tue, 13 Feb 2001, John Heyer wrote:

> 
> Can anybody tell me what firewall rules I should be using to run natd
> -reverse -n <internal NIC>?  I want to use proxy_rule to transparent
> caching via localhost:3128, but can't get natd -reverse running.  I only
> have one internal interface.  thanks

	I wouldn't use NAT for this purpose.  ipfw fwd was designed
	specifically for this use (from what I've read).

	ipfw add fwd 127.0.0.1,3128 tcp from any to any 80 \
	out recv $INSIDE_INT xmit $OUTSIDE_INT

	Make sure your kernel was build with IPFIREWALL_FORWARD first.


Nick Rogness <nick@rogness.net> 
- Keep on routing in a Free World...
  "FreeBSD: The Power to Serve!"



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message