From owner-freebsd-net@freebsd.org Sat May 19 17:35:50 2018 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F31B0EDB917 for ; Sat, 19 May 2018 17:35:49 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.netfence.it (net-2-44-121-52.cust.vodafonedsl.it [2.44.121.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mailserver.netfence.it", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 611C777BD2 for ; Sat, 19 May 2018 17:35:48 +0000 (UTC) (envelope-from ml@netfence.it) Received: from alamar.ventu (alamar.local.netfence.it [10.1.2.18]) (authenticated bits=0) by soth.netfence.it (8.15.2/8.15.2) with ESMTPSA id w4JHZfQa078360 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Sat, 19 May 2018 19:35:47 +0200 (CEST) (envelope-from ml@netfence.it) X-Authentication-Warning: soth.netfence.it: Host alamar.local.netfence.it [10.1.2.18] claimed to be alamar.ventu Subject: Re: Proxy a TCP connection To: Reshad Patuck , freebsd-net@freebsd.org References: <2346bc5f-1ca3-3b6a-ac1a-c496e94eb969@netfence.it> <0A8A304F-0772-4F1D-8906-B1AB9B7E2F36@gmail.com> From: Andrea Venturoli Message-ID: <4df8e051-c95a-faf3-1b07-2da944ee2074@netfence.it> Date: Sat, 19 May 2018 19:35:41 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <0A8A304F-0772-4F1D-8906-B1AB9B7E2F36@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 May 2018 17:35:50 -0000 On 05/19/18 00:08, Reshad Patuck wrote: > Hi, > > If you are running pf or ipfw on your router you could use a forward > rule to forward connections that come in on a certain internet IP and > port to a select internal IP or port. Thanks. I'm in fact using ipfw, but already have quite a complex rule set and I'd rather avoid messing with it further. > If you don't have a firewall running and can install ports on your > router have a look at relayd, it should do what you want. Do I understand correctly that it's a front-end to pf? So kernel level again? bye & Thanks av.