From owner-freebsd-questions@FreeBSD.ORG Sat Aug 2 02:12:04 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C859C37B401 for ; Sat, 2 Aug 2003 02:12:04 -0700 (PDT) Received: from kwiatek.eu.org (116-moc-8.acn.waw.pl [212.76.59.116]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2B29D43FAF for ; Sat, 2 Aug 2003 02:12:03 -0700 (PDT) (envelope-from kwiatek@tpi.pl) Received: from localhost (localhost [127.0.0.1]) by kwiatek.eu.org (Postfix) with ESMTP id 1E524F46; Sat, 2 Aug 2003 11:11:44 +0200 (CEST) Date: Sat, 2 Aug 2003 11:11:44 +0200 (CEST) From: Andrzej Kwiatkowski X-X-Sender: kwiatek@kwiatek.eu.org To: Lowell Gilbert In-Reply-To: <44ispi19cr.fsf@be-well.ilk.org> Message-ID: <20030802110828.B2585@kwiatek.eu.org> References: <410-220037229204050796@M2W031.mail2web.com> <20030729224930.L7243@kwiatek.eu.org> <44ispi19cr.fsf@be-well.ilk.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-questions@freebsd.org Subject: Re: ipfw ruleset question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Aug 2003 09:12:05 -0000 > Sounds like your spam-blocking rules include some packet-accepting > rules. What does the ruleset look like? > 100 divert natd all from any to any via ext_if rules from 150 to 500 are blocking rules for my firewall rules from 1000 and up are for my clients. My natd runs as 1:1 nat. what I need is: rules from 100 to 499 for blocking spam 500 divert natd all from any to any via ext_if and the rest is not important... I would like not all packets sending to nat, it some kind of disabling spam, and so on.. Have got any idea ? Thanks in advance Andrzej Kwiatkowski