From owner-freebsd-questions Sat Oct 24 18:19:49 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id SAA22697 for freebsd-questions-outgoing; Sat, 24 Oct 1998 18:19:49 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA22685 for ; Sat, 24 Oct 1998 18:19:44 -0700 (PDT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.9.1/8.9.1) id UAA00610; Sat, 24 Oct 1998 20:19:04 -0500 (CDT) Date: Sat, 24 Oct 1998 20:19:04 -0500 From: Dan Nelson To: "Sean T. Lamont .lost." , questions@FreeBSD.ORG, lamont@abstractsoft.com Subject: Re: All-encompassing alias Message-ID: <19981024201904.C29492@emsphone.com> References: <199810240037.RAA01669@itchy.serv.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.94.3i In-Reply-To: <199810240037.RAA01669@itchy.serv.net>; from "Sean T. Lamont .lost." on Fri Oct 23 17:37:35 GMT 1998 X-OS: FreeBSD 2.2.7-STABLE Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In the last episode (Oct 23), Sean T. Lamont .lost. said: > Can anyone tell me if it's possible to alias a freebsd box to respond > to ALL IP#'s except its broadcast address? > > Why would I want to do this? I want to have a given IP address push > data off onto a dummy server. Specifically, I want to take suspended > accounts and drop them on a 'pay us, please' web page instead of the > one they actually requested. I know precisely how to do this on the > cisco side with policy routing, but I'm trying to figure out how to > do this on the host side. I think this is a similar approach to > transparent proxying with squid, as well. You might be able to do this with the "ipfw fwd" command (after adding options IPFIREWALL_FORWARD to your kernel). Something like ipfw add fwd ,81 from to any 80 ipfw add fwd ,82 from to any should intercept any outgoing connections from deadbeatIP. Then put your "your account is overdrawn" page on the web server on port 81, and a generic script that simply echos a text message on port 82. At least that's how I think it'd work. Never tried it. Why not just disable the users account and explain their money problem when they call to complain about their service being cut off? :) -Dan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message