From owner-freebsd-questions Wed Sep 22 6:54:34 1999 Delivered-To: freebsd-questions@freebsd.org Received: from volodya.prime.net.ua (volodya.prime.net.ua [195.64.229.17]) by hub.freebsd.org (Postfix) with ESMTP id 3FD3D14DA4 for ; Wed, 22 Sep 1999 06:54:27 -0700 (PDT) (envelope-from andyo@prime.net.ua) Received: from prime.net.ua (localhost [127.0.0.1]) by volodya.prime.net.ua (8.9.3/8.8.8) with ESMTP id QAA38410; Wed, 22 Sep 1999 16:55:34 +0300 (EEST) (envelope-from andyo@prime.net.ua) Message-ID: <37E8DFCE.6E9B6F35@prime.net.ua> Date: Wed, 22 Sep 1999 16:55:28 +0300 From: "Andy V. Oleynik" Organization: M-Info X-Mailer: Mozilla 4.61 [en] (X11; I; FreeBSD 3.2-STABLE i386) X-Accept-Language: en, ru, uk MIME-Version: 1.0 To: Mikhail Teterin Cc: questions@FreeBSD.ORG Subject: Re: natd, ftp, two ethernet cards References: <199909220531.BAA26383@rtfm.newton> Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG natd -i ed0 -u where ed0 is ur public interface. Dont forget to make ur dualNIC box a gateway. Mikhail Teterin wrote: > Can someone, whose setup resembles what's listed in the subject, please, > send his/her firewall rules and the /etc/natd.conf? > > Searching through the mailing lists, brings up only cries for help (like > this one), or confident responses like: "yeah, of course, just read the > natd(8)". Well, natd is NOT easy to understand, unfortunately. I need to > let the machines on my home LAN ftp out (to install FreeBSD over ftp, > for example). Being able to access my ISP's (MediaOne) news-server would > be nice too. > > Thanks a lot! > > -mi > > P.S. My favorite part of natd(8) is this: > > -redirect_port proto targetIP:targetPORT[-targetPORT] [aliasIP:]alias- > PORT[-aliasPORT] [remoteIP[:remotePORT[-remotePORT]]] Redirect > incoming connections arriving to given port(s) to another host > and port(s). Proto is either tcp or udp, targetIP is the > desired target IP number, targetPORT is the desired target > PORT number or range, aliasPORT is the requested PORT number > or range, and aliasIP is the aliasing address. RemoteIP > and remotePORT can be used to specify the connection more > accurately if necessary. The targetPORT range and aliasPORT > range need not be the same numerically, but must have the same > size. If remotePORT is not specified, it is assumed to be all > ports. If remotePORT is specified, it must match the size of > targetPORT, or be 0 (all ports). For example, the argument > U dont need it in general case. > > How can one tell the difference between "the desired" and "the > requested"?! > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message -- WBW Andy V. Oleynik (When U work in virtual office prime.net.ua's U have good chance to obtain system administrator virtual money ö%-) +380442448363 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message