From owner-freebsd-net  Fri Dec 28 14:20:15 2001
Delivered-To: freebsd-net@freebsd.org
Received: from rwcrmhc52.attbi.com (rwcrmhc52.attbi.com [216.148.227.88])
	by hub.freebsd.org (Postfix) with ESMTP
	id 65ADF37B41A; Fri, 28 Dec 2001 14:20:11 -0800 (PST)
Received: from InterJet.elischer.org ([12.232.206.8])
          by rwcrmhc52.attbi.com
          (InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP
          id <20011228222010.OAPH6450.rwcrmhc52.attbi.com@InterJet.elischer.org>;
          Fri, 28 Dec 2001 22:20:10 +0000
Received: from localhost (localhost.elischer.org [127.0.0.1])
	by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id OAA94796;
	Fri, 28 Dec 2001 14:11:07 -0800 (PST)
Date: Fri, 28 Dec 2001 14:11:06 -0800 (PST)
From: Julian Elischer <julian@elischer.org>
To: Nick Rogness <nick@rogness.net>
Cc: "Crist J . Clark" <cjc@FreeBSD.ORG>,
	Henry Su <henrysu@nttmcl.com>, freebsd-net@FreeBSD.ORG
Subject: Re: Why is my ipfw(8) ``fwd'' rule to redirect a service to another
 machine not working?
In-Reply-To: <Pine.BSF.4.21.0112281553110.6468-100000@cody.jharris.com>
Message-ID: <Pine.BSF.4.21.0112281405080.94344-100000@InterJet.elischer.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org



On Fri, 28 Dec 2001, Nick Rogness wrote:

> On Fri, 28 Dec 2001, Julian Elischer wrote:
> 
> > Also, in versions of FreeBSD before 4.6, packets matched while
> > INCOMING could only be forwarded to the local host. Outgoing packets
> > could be forwarded to an adjoining host. This was fixed while 4.5 was
> > cooking and appeared in releases after that. The port number is only
> > used for forwarding to the local host.
> 
> 	Um, so you can now fwd based on incoming packets?  EX:
> 
> 	ipfw fwd 10.1.2.3 ip from any to 1.1.1.1 in via ed0

That will now work in -current and will in 4.x when I MFC it..
I looked in the man page and didn't see this mentionned I'l read it better
again and fix it if it's now Out of date.

Hmm I still can't find that example..
AHHHH found it....
will fix by removing 
"and the rule only applies to packets leaving the system"

is that what you are refering to?


> 
> 	Or is it still the way it is stated in the ipfw man page? EX:
> 
> 	ipfw fwd 10.1.2.3 ip from any to 1.1.1.1 out recv ed0 xmit xl0

That will still work...

> 
> 
> Nick Rogness <nick@rogness.net>
>  - Don't mind me...I'm just sniffing your packets
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message