From owner-freebsd-questions@FreeBSD.ORG Thu Jun 23 11:44:50 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B3A4E16A41C for ; Thu, 23 Jun 2005 11:44:50 +0000 (GMT) (envelope-from peterpub1@aboutsupport.com) Received: from mail.hostmansion.com (mail.hostmansion.com [69.42.139.9]) by mx1.FreeBSD.org (Postfix) with ESMTP id A104343D49 for ; Thu, 23 Jun 2005 11:44:50 +0000 (GMT) (envelope-from peterpub1@aboutsupport.com) Received: from [216.158.144.61] (mail.hostmansion.com [69.42.139.9]) by mail.hostmansion.com (Postfix) with ESMTP id 36F1D11C028 for ; Wed, 22 Jun 2005 21:18:22 -0700 (PDT) Message-ID: <42BAA0A9.3090808@aboutsupport.com> Date: Thu, 23 Jun 2005 14:44:41 +0300 From: Peter User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "freebsd-questions@freebsd.org" Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Simple ipfw problem :( X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jun 2005 11:44:50 -0000 Hi, with my old linux box I forward all my LAN traffic coming from eth1 via eth0 with these simple 3 lines $IPTABLES -t nat -A POSTROUTING -o $INET_IFACE -j MASQUERADE $IPTABLES -A FORWARD -i $LAN_IFACE -j ACCEPT $IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT Howevr I moved the box to FreeBSD 5.4 and also I have a new connection PPPoE. I enabled the IPDIVERRT, FIRREWALL etc in the kernel but I am unable to make traffic coming from rl0(internal interface) be forwaded via tun0( PPPoE interface). I have gateway_enable='yes', tried playing with ppp_nat etc... But no luck.... Is there a simple way to do that with ipfw ? Please help - I am little bit confused... Thanks in advance for your help... Kind regards, Peter