From owner-freebsd-net Tue Jul 10 14:39:11 2001 Delivered-To: freebsd-net@freebsd.org Received: from cody.jharris.com (cody.jharris.com [205.238.128.83]) by hub.freebsd.org (Postfix) with ESMTP id 6320537B409 for ; Tue, 10 Jul 2001 14:39:07 -0700 (PDT) (envelope-from nick@rogness.net) Received: from localhost (nick@localhost) by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f6AN69T51879; Tue, 10 Jul 2001 18:06:09 -0500 (CDT) (envelope-from nick@rogness.net) Date: Tue, 10 Jul 2001 18:06:09 -0500 (CDT) From: Nick Rogness X-Sender: nick@cody.jharris.com To: Julian Elischer Cc: Peter Warrick , freebsd-net@FreeBSD.ORG Subject: Re: IPFW and NATD In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, 10 Jul 2001, Julian Elischer wrote: > > > On Tue, 10 Jul 2001, Nick Rogness wrote: > > You need to add another rule: > > > > ipfw add divert natd all from $PUBLIC_IP to any in via en0 > ^ ^ > \----------/ > swap these > > > > > > The $PUBLIC_IP should be the IP of en0. This will only work if > > your non-diverted traffic is using a different public IPs...which > > I'm assuming you are. > > OR you don NOT want other machines to be able to get out. Ooops...yep he's right...relized that after I read Julian's original response. Nick Rogness - Keep on Routing in a Free World... "FreeBSD: The Power to Serve!" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message