Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Apr 2000 19:14:57 +0100
From:      Adam Laurie <adam@algroup.co.uk>
To:        Ron Smith <ronnetron@hotmail.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Using proxys with ipfw
Message-ID:  <39009AA1.4880F38F@algroup.co.uk>
References:  <20000421175830.78962.qmail@hotmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Ron Smith wrote:
> 
> Hello All,
> 
> I'm trying to determine if it's possible to implement smtp/pop, ftp, and www
> proxys with ipfw rules in place. If it is possible, which proxy software
> would be the best to use. I have a dual-homed gateway with ipfw rules in
> place. Everything works great ,  but I only have access to and from the
> Internet with NAT, at this point. I would like to add the ability to access
> a mail server behind a firewall from the outside world. I would also like to
> do the same for www and ftp services as well. Any pointers?

Assuming you are using natd, try 'man natd' - the interesting bit being:

     -redirect_port proto targetIP:targetPORT [aliasIP:]aliasPORT [re-
                 moteIP[:remotePORT]]
                 Redirect incoming connections arriving to given port to
an-
                 other host and port.  Proto is either tcp or udp,
targetIP is
                 the desired target IP number, targetPORT is the desired
tar-
                 get PORT number, aliasPORT is the requested PORT number
and
                 aliasIP is the aliasing address.  RemoteIP and
remotePORT can
                 be used to specify the connection more accurately if
neces-
                 sary.  For example, the argument

                 tcp inside1:telnet 6666

                 means that tcp packets destined for port 6666 on this
machine
                 will be sent to the telnet port on the inside1 machine.

cheers,
Adam
--
Adam Laurie                   Tel: +44 (181) 742 0755
A.L. Digital Ltd.             Fax: +44 (181) 742 5995
Voysey House                  
Barley Mow Passage            http://www.aldigital.co.uk
London W4 4GB                 mailto:adam@algroup.co.uk
UNITED KINGDOM                PGP key on keyservers


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?39009AA1.4880F38F>