From owner-freebsd-questions@FreeBSD.ORG  Tue Apr 20 13:45:55 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 600D516A4CE
	for <freebsd-questions@freebsd.org>;
	Tue, 20 Apr 2004 13:45:55 -0700 (PDT)
Received: from rwcrmhc11.comcast.net (rwcrmhc11.comcast.net [204.127.198.35])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 12F1E43D45
	for <freebsd-questions@freebsd.org>;
	Tue, 20 Apr 2004 13:45:55 -0700 (PDT)	(envelope-from cs@ctzen.com)
Received: from europa.ctzen.com
	(h0040055d253a.ne.client2.attbi.com[24.147.64.178])
	by comcast.net (rwcrmhc11) with ESMTP
	id <2004042020455401300fls14e>; Tue, 20 Apr 2004 20:45:54 +0000
Received: by europa.ctzen.com (Postfix, from userid 1001)
	id 144963BA05; Tue, 20 Apr 2004 16:45:54 -0400 (EDT)
Date: Tue, 20 Apr 2004 16:45:53 -0400
From: Chiang Seng Chang <cs@europa.ctzen.com>
To: freebsd-questions@freebsd.org
Message-ID: <20040420204553.GA3225@europa.ctzen.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.2.1i
Subject: iptables to ipfw
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Apr 2004 20:45:55 -0000

hi,

anyone knows what is the equivalent of these in ipfw ?

  iptables -t nat -A POSTROUTING -s 10.1.0.2/32 -o eth0 -j MASQUERADE
  iptables -t nat -A POSTROUTING -s 10.50.4.0/22 -o eth0 -j MASQUERADE

it's for openvpn using tun0.

i have setup natd using:

  ipfw add divert natd all from any to any via dc0

and it is working.

but i would like to be more specific so that i am not nat'ing unnecessary.

tried without success:

  ipfw add divert natd all from 10.1.0.1/32 to any via dc0
  ipfw add divert natd all from 10.50.4.0/22 to any via dc0

thanks and regards.

-cs