From owner-freebsd-ipfw@FreeBSD.ORG  Mon Aug 23 06:14:06 2004
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 00AAB16A4CE
	for <freebsd-ipfw@freebsd.org>; Mon, 23 Aug 2004 06:14:06 +0000 (GMT)
Received: from mail.esoltani.com (baba.esoltani.com [67.120.127.181])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C20C043D31
	for <freebsd-ipfw@freebsd.org>; Mon, 23 Aug 2004 06:14:05 +0000 (GMT)
	(envelope-from patrick@esoltani.com)
Received: from localhost (localhost [127.0.0.1])
	by mail.esoltani.com (Postfix) with ESMTP
	id 656CB8FC3C; Sun, 22 Aug 2004 23:14:05 -0700 (PDT)
Received: from mail.esoltani.com ([127.0.0.1])
 by localhost (baba.esoltani.com [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 68518-03; Sun, 22 Aug 2004 23:14:02 -0700 (PDT)
Received: from [192.168.1.105] (khanoom.esoltani.com [192.168.1.105])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.esoltani.com (Postfix) with ESMTP
	id 5E8248FC1F; Sun, 22 Aug 2004 23:14:02 -0700 (PDT)
Message-ID: <41298C02.1020008@esoltani.com>
Date: Sun, 22 Aug 2004 23:17:38 -0700
From: patrick <patrick@esoltani.com>
User-Agent: Mozilla Thunderbird 0.7.3 (Windows/20040803)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Dongxiang Liao <dongxiang@fastmail.fm>
References: <A732E69C-F4B1-11D8-B19B-0003934292BC@fastmail.fm>
In-Reply-To: <A732E69C-F4B1-11D8-B19B-0003934292BC@fastmail.fm>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by amavisd-new at esoltani.com
cc: freebsd-ipfw@freebsd.org
Subject: Re: natd -redirect_port
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Aug 2004 06:14:06 -0000

Dongxiang Liao wrote:
> Hey there,
> 
> I have been playing with ipfw and natd to setup firewall and port remap, 
> but having problem with a seemingly trivial situation.
> 
> I want to redirect the incoming traffic to port 995 to port 22 on the 
> same machine.  The man page of natd suggest natd -redirect_port should 
> do it.  But "natd -redirect_port tcp 22 995" indicate I am missing the 
> target address and alias address.  I don't quite understand the 
> situation since I have only one machine itself here.
> 
> I would appreciate any suggestions.
> 
> Dong
> 


Assuming you already setup "natd" and it's working then the following 
should work, provided your internal network/interface is numbered 
192.168.1.1 and your external network/interface 1.2.3.4.
redirect_port tcp 192.168.1.1:995 1.2.3.4:22

I have feeling you are attempting to make the pop3 access secure, if 
yes, take a look at:
http://www.cs.duke.edu/csl/security/secure-email.php

Regards,
Patrick Soltani.