From owner-freebsd-questions  Fri Jul 28  5:19:11 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mail2.wmptl.com (mail2.wmptl.com [216.221.73.131])
	by hub.freebsd.org (Postfix) with ESMTP id C7D4937BE46
	for <questions@freebsd.org>; Fri, 28 Jul 2000 05:19:04 -0700 (PDT)
	(envelope-from webmaster@wmptl.com)
Received: from wmptl.com ([10.0.0.168])
	by mail2.wmptl.com (8.9.3/8.9.3) with ESMTP id IAA24741;
	Fri, 28 Jul 2000 08:17:17 -0400 (EDT)
	(envelope-from webmaster@wmptl.com)
Message-ID: <398179F4.8C9DDD29@wmptl.com>
Date: Fri, 28 Jul 2000 08:17:56 -0400
From: Nathan Vidican <webmaster@wmptl.com>
X-Mailer: Mozilla 4.72 [en] (Win95; I)
X-Accept-Language: en
MIME-Version: 1.0
To: "K'lyum" <87ch197@gadz.org>
Cc: questions@freebsd.org
Subject: Re: Firewalling and Proxy [The las message has a wrong e-mail]
References: <002201bff875$bb051dc0$83c3a8c0@bbgorgu>
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

> K'lyum wrote:
> 
> Hi,
> 
> First i'm very impressed by the quality of the job done..
> I'm sorry to ask such a question but i can't find help on the
> freebsd.org site .
> 
> So i'm using freebsd 4.0 release as a firewall with firewall enabled
> in kernel.
> 
> All is working fine but i want my web server (wich is behind the
> firewall) to be accessible by external machines (on the Internet). So
> i decide to use the rule forward of the Firewall :
> 
> ipfw add fwd webserver,80 tcp from any to firewallmachine 80 in recv
> tun0
> 
> The rule is applied when a connection is made (I used the log option)
> but the web client can't get any answer..
> 
> Can i use such a solution for my configuration or am I totally wrong ?
> 
> I Thank you if you can add an answer on the website or by mail
> 
> Timothy Nelson
> Union des Eleves de l'Ecole Nationale Supérieur des Arts et Métiers de
> Paris [France]
> Student Association of the National Engeenering Institute

Run the command:

man natd

I think Network Address Translation would be better for your needs here.

-- 
Nathan Vidican
webmaster@wmptl.com
Windsor Match Plate & Tool Ltd.
http://www.wmptl.com/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message