From owner-freebsd-questions@FreeBSD.ORG Thu May 12 16:56:21 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B04E716A4CE for ; Thu, 12 May 2005 16:56:21 +0000 (GMT) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.204]) by mx1.FreeBSD.org (Postfix) with ESMTP id BDAE143D45 for ; Thu, 12 May 2005 16:56:20 +0000 (GMT) (envelope-from calloatti@gmail.com) Received: by wproxy.gmail.com with SMTP id 69so551436wri for ; Thu, 12 May 2005 09:56:19 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=lxid0mUxM2PqOZrjLtBKCjIUAi+mKakt8VNdy9jh8p2Hzrt1FlGo7ot2v+MrZBONJ6sVHAmuaFhEfWd8W37HtbcCNfk4fMF1JEWGmYgd+noDFdFoSl4yQKRRfh1McEesVnZdjYGhW41jGZIOnl5qiS9a3ak2FbzsNDS5Z76KdrE= Received: by 10.54.133.2 with SMTP id g2mr1061285wrd; Thu, 12 May 2005 09:56:19 -0700 (PDT) Received: by 10.54.57.10 with HTTP; Thu, 12 May 2005 09:56:19 -0700 (PDT) Message-ID: <1b6c15ea05051209563c7af4b0@mail.gmail.com> Date: Thu, 12 May 2005 13:56:19 -0300 From: Carlos Alloatti To: "Andrew P." In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: cc: questions@freebsd.org Subject: Re: Redirect *:port to ip:port on the same machine? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Carlos Alloatti List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 May 2005 16:56:21 -0000 On 5/11/05, Andrew P. wrote: > Hello! >=20 > I have a program that binds to ip:port. What are > my options, if I want it to listen on all interfaces > (*:port)? Let's say reconfiguring the program > and/or running one instance per interface is > not possible. I've got ipfw as a firewall. >=20 > Thanks! How about using a port forwarder or port mapper. I think you could use ipfw and natd for it, with a divert rule, found this: > If I want to have a port mapping on the same interface, can I do that ?= =20 > 127.0.0.1: 8890 -> 127.0.0.: 25 ?=20 > If I want to do so, what is natd command ?=20 > natd -redirect_port 127.0.0.1:8890 25?=20 ------------------------------=AD------------------------------=AD---------= -------=20 ----=20 #!/bin/sh=20 outip=3D"my ip address which will be redirected"=20 server=3D"ip address redirect to"=20 # for request redirect=20 ipfw add 1000 divert 8888 tcp from any to ${outip} 8890 via cx0=20 ipfw add 2000 divert 8888 ip from ${server} to any via cx0=20 #run natd=20 natd -p 8888 -n cx0 -redirect_port tcp ${server}:25 8890=20 ipfw add 2500 allow tcp from any to ${server} 25 via any=20 but how about this: http://www.taronga.com/plugdaemon/ http://www.freebsd.org/cgi/url.cgi?ports/net/jumpgate/pkg-descr the port mapper will bind to *:port2 and forward to ip:port1 --=20 Carlos Alloatti calloatti@gmail.com