From owner-freebsd-questions@FreeBSD.ORG Fri Feb 23 10:43:13 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 127F916A400 for ; Fri, 23 Feb 2007 10:43:13 +0000 (UTC) (envelope-from f.bonnet@esiee.fr) Received: from mail.esiee.fr (mail.esiee.fr [147.215.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 5C47413C49D for ; Fri, 23 Feb 2007 10:43:11 +0000 (UTC) (envelope-from f.bonnet@esiee.fr) Received: from mail.esiee.fr (localhost.esiee.fr [127.0.0.1]) by mail.esiee.fr (Postfix) with SMTP id 989AE3658EE; Fri, 23 Feb 2007 11:43:10 +0100 (CET) Received: from secure.esiee.fr (secure.esiee.fr [147.215.1.19]) by mail.esiee.fr (Postfix) with ESMTP id 4B13B3658BF; Fri, 23 Feb 2007 11:43:10 +0100 (CET) Received: from [147.215.1.21] (lisa.esiee.fr [147.215.1.21]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: bonnetf) by secure.esiee.fr (Postfix) with ESMTP id E6CD13991B; Fri, 23 Feb 2007 11:34:19 +0100 (CET) Message-ID: <45DEC53D.3000705@esiee.fr> Date: Fri, 23 Feb 2007 11:43:09 +0100 From: Frank Bonnet User-Agent: Thunderbird 1.5.0.8 (X11/20061213) MIME-Version: 1.0 To: "Daan Vreeken [PA4DAN]" References: <45DD84C1.70308@esiee.fr> <200702221426.30370.Danovitsch@vitsch.net> In-Reply-To: <200702221426.30370.Danovitsch@vitsch.net> Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: Transparent redirect to another interface ? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Feb 2007 10:43:13 -0000 Daan Vreeken [PA4DAN] wrote: > > "natd" can be used to do this. > > The following example assumes your external interface is called "sk0" and the > seconde interface, connecting to the second server, is called "sk1" : > > # Start natd and tell it to forward pop3 traffic to the second server > natd -n sk0 -redirect_port tcp ip_of_second_server_here:110 110 > > # Add ipfw rule to send incoming pop3 traffic through natd > ipfw add 1000 divert natd tcp from any to me 110 via sk0 > # Add ipfw rule to send responses from second server through natd > ipfw add 1010 divert natd tcp from ip_of_second_server_here 110 to any via > sk0 > > # or just use one ipfw rule : > ipfw add 1000 divert natd all from any to any via sk0 > > But this will send ALL traffic through natd, only sending traffic that needs > to be redirect through it is far more efficient. > > Hope this helps, Good idea but I would prefer (if possible) to use some kind of ethernet trunking . thanks