Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 6 Sep 2006 22:41:35 +0300
From:      vladone <vladone@spaingsm.com>
To:        ipfw@freebsd.org
Subject:   Re: IPFW and natd
Message-ID:  <525121136.20060906224135@spaingsm.com>
In-Reply-To: <002e01c6d1e8$f0b772d0$4602a8c0@Laptop>
References:  <002e01c6d1e8$f0b772d0$4602a8c0@Laptop>

next in thread | previous in thread | raw e-mail | index | archive | help
Hello Mike,

Wednesday, September 6, 2006, 10:16:22 PM, you wrote:

> I have clients connecting behind a firewall on 10.xxx.xxx.xxx ip's. The
> external ip is on a 208.xxx.xxx.xxx block.  I need to assign certain clients
> behind the firewall their own static external ip that is accessible from the
> outside and also make sure they go out using this ip.  I have been unable to
> get this to work.  I have the firewall working fine with natd.  Any help
> would greatly be appreciated.

> Thanks
> Mike
> GlobalNet

> _______________________________________________
> freebsd-ipfw@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to
> "freebsd-ipfw-unsubscribe@freebsd.org"

Use redirect_address option in natd.conf to assign ip's and option
"unregistered_only yes", to do natd only for private classes.
Example natd.conf (asuming that xl0 is public interface)
use_sockets yes
same_ports yes
interface xl0
dynamic yes
unregistered_only yes
redirect_address 192.168.0.10 208.xxx.xxx.xxx
.............................................
-- 
Best regards,
 vladone                            mailto:vladone@spaingsm.com




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?525121136.20060906224135>