From owner-freebsd-questions  Wed Sep 12 15:39: 4 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from cody.jharris.com (cody.jharris.com [205.238.128.83])
	by hub.freebsd.org (Postfix) with ESMTP id E157037B405
	for <freebsd-questions@freebsd.org>; Wed, 12 Sep 2001 15:39:00 -0700 (PDT)
Received: from localhost (nick@localhost)
	by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f8CMcge22835;
	Wed, 12 Sep 2001 17:38:55 -0500 (CDT)
	(envelope-from nick@rogness.net)
Date: Wed, 12 Sep 2001 17:38:42 -0500 (CDT)
From: Nick Rogness <nick@rogness.net>
X-Sender: nick@cody.jharris.com
To: alexus <ml@db.nexgen.com>
Cc: freebsd-questions@freebsd.org
Subject: Re: port forwarding through natd and/or ipfw
In-Reply-To: <000701c13bc3$66c6f160$0d00a8c0@alexus>
Message-ID: <Pine.BSF.4.21.0109121728170.22476-100000@cody.jharris.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Wed, 12 Sep 2001, alexus wrote:

> my public ip address is 66.92.98.145 and internal ip is 192.168.0.13
> port that my XP workstation listens on is 3389r
> 
> here is form XP (part from netstat)
> 
>   TCP    0.0.0.0:3389           0.0.0.0:0              LISTENING
> 
> so it *is* listening..
> 
> first i've tryed through natd
> 
> su-2.05# grep 3389 /etc/natd.conf
> redirect_port tcp 192.168.0.13:3389 3389

	This is how you want to do it...not ipfw fwd.

[snip]
> 
> then i've tryed through firewall (ipfw)
> 
> 00333 6 288 fwd 66.92.98.145,3389 tcp from any to 192.168.0.13 3389

	ipfw fwd is NOT related to natd.  For your purpose do not use ipfw
	fwd, you need something like:

		ipfw divert natd ip from any to any via fxp0

	Or a couple entries in /etc/rc.conf:

		natd_enable="YES"
		natd_interface="fxp0"
		natd_flags="-f /etc/natd.conf"
> 
> this was a little bit more suscess then others due to at least this
> rule was matched .. but i didn't get to my XP workstation:(

	You do not need forwarding as the "IP packet processing
	system" will deliver that packet after divert has changed it.

> 
> i *did* enabled firewall in kernel
> 
> su-2.05# grep FIREWALL box
> options         IPFIREWALL              #firewall
> options         IPFIREWALL_VERBOSE      #print information about
> options         IPFIREWALL_VERBOSE_LIMIT=10    #limit verbosity
> options         IPFIREWALL_FORWARD      #enable transparent proxy support
> su-2.05#

	You need:

		options		IPDIVERT 

	also in the kernel config file.


Nick Rogness <nick@rogness.net>
 - Keep on Routing in a Free World...
  "FreeBSD: The Power to Serve!"


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message