From owner-freebsd-hackers@FreeBSD.ORG Wed May 10 13:59:57 2006 Return-Path: X-Original-To: freebsd-hackers@freebsd.org Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C5C0A16A4A5 for ; Wed, 10 May 2006 13:59:57 +0000 (UTC) (envelope-from phoemix@harmless.hu) Received: from marvin.harmless.hu (marvin.harmless.hu [195.56.55.204]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7523843D58 for ; Wed, 10 May 2006 13:59:54 +0000 (GMT) (envelope-from phoemix@harmless.hu) Received: from localhost (localhost [127.0.0.1]) by marvin (Postfix) with ESMTP id 8235A20001CA; Wed, 10 May 2006 15:59:52 +0200 (CEST) Received: from marvin.harmless.hu ([127.0.0.1]) by localhost (marvin [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 09437-04; Wed, 10 May 2006 15:59:52 +0200 (CEST) Received: by marvin (Postfix, from userid 1000) id 03F1220001C9; Wed, 10 May 2006 15:59:52 +0200 (CEST) Date: Wed, 10 May 2006 15:59:52 +0200 To: "marcel245@mweb.co.za" Message-ID: <20060510135951.GB13081@marvin.harmless.hu> References: <922141e3b0574a3aaf1eb5e364c4c463@mweb.co.za> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="hQiwHBbRI9kgIhsi" Content-Disposition: inline In-Reply-To: <922141e3b0574a3aaf1eb5e364c4c463@mweb.co.za> User-Agent: Mutt/1.5.9i From: phoemix@harmless.hu (Gergely CZUCZY) X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at harmless.hu Cc: freebsd-hackers@freebsd.org Subject: Re: IPFW + NATD X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 May 2006 14:00:04 -0000 --hQiwHBbRI9kgIhsi Content-Type: text/plain; charset=utf-8 Content-Disposition: inline On Wed, May 10, 2006 at 02:26:45PM +0200, marcel245@mweb.co.za wrote: > I am still having huge troubles with using natd with the "divert natd" > = in ipfw. > I can only nat all my traffic or none. > What i would = like to do is simply nat accoring to box or service for > a particular bo= x. > This is a example of what works for natting all traffic. > <= BR>ipfw add divert natd all from any to any via tun0 > Now i = have tried the likes of "ipfw add divert natd all from > 10.150.200.= 35 to 196.25.211.150 via tun0" > And that does not work. Ive tried many examples. And cannot come right. > All = i need to do is nat for a novell srv trying to access a mail > serve= r pop account. > Currently im forced to use port forward utilities t= hat dont work. > Help would really be appreciated. why don't you simply use pf? pf simply rocks, and the natting facility is built in(i don't see the point of userspace natting). i would give it a try if i were you Bye, Gergely Czuczy mailto: gergely.czuczy@harmless.hu PGP: http://phoemix.harmless.hu/phoemix.pgp Weenies test. Geniuses solve problems that arise. --hQiwHBbRI9kgIhsi Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFEYfHXbBsEN0U7BV0RAmv+AJ9mXkj1kOJuUNsBvUOjA+lxoZYZqwCgkxTY 7+/2Kd9PPQx2NEPgMpfA/5g= =8qdT -----END PGP SIGNATURE----- --hQiwHBbRI9kgIhsi--