From owner-freebsd-questions Wed May 16 21:24:52 2001 Delivered-To: freebsd-questions@freebsd.org Received: from femail13.sdc1.sfba.home.com (femail13.sdc1.sfba.home.com [24.0.95.140]) by hub.freebsd.org (Postfix) with ESMTP id 9068B37B422 for ; Wed, 16 May 2001 21:24:49 -0700 (PDT) (envelope-from craig-burgess@home.net) Received: from [24.0.178.21] by femail13.sdc1.sfba.home.com (InterMail vM.4.01.03.20 201-229-121-120-20010223) with ESMTP id <20010517042449.MQR570.femail13.sdc1.sfba.home.com@[24.0.178.21]> for ; Wed, 16 May 2001 21:24:49 -0700 Message-ID: <3B03539A.E9C2C4FF@.home.net> Date: Wed, 16 May 2001 21:29:14 -0700 From: craig burgess X-Mailer: Mozilla 4.77 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-questions@FreeBSD.ORG Subject: begging assistance: natd/firewall port config Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG IPFIREWALL statements are compiled into the kernel and natd basically works -- ftp and browsers work seamlessly. I have tried various permutations of ipfw statements in rc.firewall without success. Some are shown below. I need to enable tcp on ports 2050 and 2051. The more i read man pages the more confused i get. /etc/services teletrac 2050/tcp #teletrac teletrac 2051/tcp #teletrac /etc/rc.conf: natd_enable="YES" natd_interface="xl0" natd_flags="-s -m" firewall_enable="YES" firewall_type="OPEN" /etc/rc.firewall: # Prototype setups. if [ "${firewall_type}" = "open" -o "${firewall_type}" = "OPEN" ]; then $fwcmd add 300 allow any from 192.168.0.130 to 208.19.xxx.xxx ##$fwcmd add 400 allow tcp from any to any 2051 setup ##$fwcmd add 65001 pass tcp from any to any established ##$fwcmd add 65002 pass tcp from 208.19.xxx.xxx to 192.168.0.130:255.255.255.0 $fwcmd add 65000 pass all from any to any elif [ "${firewall_type}" = "client" ]; then .... thanks in advance craig To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message