Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 8 Aug 2004 17:30:50 -0500
From:      "Eric Crist" <ecrist@secure-computing.net>
To:        <mailist@whoweb.com>, <freebsd-questions@freebsd.org>
Subject:   RE: IPFW/NATD Transparent Proxy
Message-ID:  <006701c47d97$5e6f6970$6401a8c0@Nomad>
In-Reply-To: <200408081843.21513.mailist@whoweb.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> -----Original Message-----
> From: owner-freebsd-questions@freebsd.org
> [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of
> mailist@whoweb.com
> Sent: Sunday, August 08, 2004 5:43 PM
> To: freebsd-questions@freebsd.org
> Subject: Re: IPFW/NATD Transparent Proxy
>
>
>
> On Sunday 08 August 2004 04:38 pm, JJB wrote:
> > A new rewrite of the FreeBSD handbook firewall section is currently
> > being made ready for update to the handbook. You can get an
> in-process
> > copy from  www.a1poweruser.com/FBSD_firewall/
>
> The firewall rewrite only deals with a single public nic and
> a single internal nic and does not have the information I require.
>
> > From what you posted looks like you want public internet users to
> > access web server on one of your LAN machines. Both ipfw
> and ipfilter
> > does this normally with port redirect.
>
> No, I want a user on 192.168.1.247 to be redirected to
> 192.168.2.250:80 when
> they request 1.2.3.4:80, where 1.2.3.4 is a PUBLIC ip number
> on the FreeBSD
> internet gateway.  Again, the configuration is
> 	de0 = PUBLIC IP = 1.2.3.4
> 	de1 = 192.168.1.1
> 	de2 = 192.168.2.1
>
> I don't have a problem with incoming requests for 1.2.3.4:80
> from the Internet
> being redirected to 192.168.2.250.  That works fine.  But I
> want someone on
> 192.168.1.247 to ALSO be redirected to 192.168.2.250:80 when
> they request the
> public address 1.2.3.4:80.
>

Could you send us (or me, peronally) your firewall script, and the
address you want to use?

Thanks.

Eric F Crist




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?006701c47d97$5e6f6970$6401a8c0>