Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 27 Jan 2001 02:02:25 -0700 (MST)
From:      Nick Rogness <nick@rapidnet.com>
To:        freebsd-net@freebsd.org
Subject:   ipfw fwd
Message-ID:  <Pine.BSF.4.21.0101270147530.6443-100000@rapidnet.com>

next in thread | raw e-mail | index | archive | help

Couple of comments on ipfw fwd.

After playing around with the forward feature of ipfw, I ran into a couple
of interesting things.  First let me give you my test lab environment
diagram:

				Internet
				|
				xl0
				|
	192.168.10.1 ----ed1---FreeBSD
				|
				fxp0
				|
				192.168.20.0/24

After adding the command:

	ipfw add 100 fwd 192.168.10.1 tcp from any to any 80 in via fxp0

I see no packet arrive at host 192.168.10.1.  Do forwarded packets
re-enter the firewall for a given outgoing interface?  In this case
ed1 ?  Or are they somehow skipped and just routed out the interface after
a match is made?

After changing the above ipfw command to 'out via xl0' I start seeing
incoming packets on the 192.168.10.1 host.  Do IPFW Forward rules only
apply to outgoing style rules?


Nick Rogness
- Keep on routing in a Free World...  
  "FreeBSD: The Power to Serve "



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0101270147530.6443-100000>