Date: Tue, 14 Sep 2004 07:54:32 -0700 (PDT) From: Mark Atkinson <mark-pf@filament.org> To: pf4freebsd@freelists.org Cc: phusion <phusion2k@gmail.com> Subject: [pf4freebsd] Re: Convert IPFW Ruleset to PF Message-ID: <20040914075305.R25811@hellfire.filament.org> In-Reply-To: <20040914074106.H25811@hellfire.filament.org> References: <c3ed3fdc04091317413da12e3d@mail.gmail.com> <20040914074106.H25811@hellfire.filament.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 14 Sep 2004, Mark Atkinson wrote:
> On Mon, 13 Sep 2004, phusion wrote:
> > How can I convert this simple ipfw ruleset to pf?
> >
> > fwcmd="/sbin/ipfw"
> > ${fwcmd} -f flush
> > ${fwcmd} add divert natd all from any to any via xl0
> > ${fwcmd} add pass all from any to any
> >
> > Let me know. Thanks.
>
> something like this in your /etc/pf.conf
>
> scrub in all random-id no-df fragment reassemble
> nat on xl0 from <IF>:network to any -> 192.168.101.245
> pass in all
> pass out all
>
> replace <IF> with your internal network nic device.
also replace the 192.168.101.245 ip with your public/routable ip address.
> --
> Mark Atkinson
> mark-pf at filament dot org
> (!wired)?(coffee++):(wired);
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040914075305.R25811>