From owner-freebsd-questions  Thu Jan  3 16:37:55 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from defiant.apana.org.au (defiant.apana.org.au [203.11.114.25])
	by hub.freebsd.org (Postfix) with ESMTP id D762037B41A
	for <questions@FreeBSD.ORG>; Thu,  3 Jan 2002 16:37:49 -0800 (PST)
Received: from sushi.odyssey.apana.org.au (mushka.cx [203.11.114.10])
	by defiant.apana.org.au (8.9.3/8.9.3) with ESMTP id IAA24542;
	Fri, 4 Jan 2002 08:37:38 +0800 (WST)
Message-Id: <5.1.0.14.2.20020104083511.00ba2270@Pop3.norton.antivirus>
X-Sender: dean/odyssey.apana.org.au@Pop3.norton.antivirus
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Fri, 04 Jan 2002 08:37:35 +0800
To: cjclark@alum.mit.edu
From: Dean Hollister <dean@odyssey.apana.org.au>
Subject: Re: ipfw question
Cc: questions@FreeBSD.ORG
In-Reply-To: <20020103143914.D236@gohan.cjclark.org>
References: <20020103184834.R61032-100000@odyssey.apana.org.au>
 <20020103184834.R61032-100000@odyssey.apana.org.au>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

At 14:39 03/01/2002 -0800, Crist J. Clark wrote:

>You cannot use 'fwd' to forward packets to a different port on another
>host.

It's not forwarding to a different port as such, but the same port on 
another host.

> > ipfw add 90 fwd 1.1.1.1,100 tcp from localhost to any 100 out
>
>There are a two problems here. First, specifying the port in the 'fwd'
>command is meaningless if 1.1.1.1 is a remote host. Second, do you
>really want to redirect packets with a source IP address of 127.0.0.1?
>Those should never go over the wire.

It was only an example. In the case of

ipfw add 90 fwd 1.1.1.1,100 tcp from 2.2.2.2 to any 100 out

Would this work? It doesn't appear to when I added the rule and tested it.

>Not being "filtered?" I suspect that you are actually trying to do NAT
>or the like here?

I'll do some reading up on NAT to see if that's the case.

Thanks for your help so far. :-)

Regards,

d.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message