From owner-freebsd-current@FreeBSD.ORG Tue Nov 14 04:23:17 2006 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8A77716A416 for ; Tue, 14 Nov 2006 04:23:17 +0000 (UTC) (envelope-from fulanpeng@gmail.com) Received: from nz-out-0102.google.com (nz-out-0102.google.com [64.233.162.192]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4F19743D49 for ; Tue, 14 Nov 2006 04:23:16 +0000 (GMT) (envelope-from fulanpeng@gmail.com) Received: by nz-out-0102.google.com with SMTP id i11so894206nzh for ; Mon, 13 Nov 2006 20:23:15 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=ST1y7BsMvwX/hb7Biz/IPt05cKLq5diGq5TATCRfD44MRwoMJIlHy1YOfScZFmKa3rKAV7XU1OMbzzQ41m25JbKHUdpVbL2zyuPv4W0uUq2V6Cwj1YFfFmrhceO0z0bGoy0pNkbjUACLzlVg/IQhwdGb2VopNO2wSZUhSVGGZA8= Received: by 10.65.219.4 with SMTP id w4mr395581qbq.1163478194765; Mon, 13 Nov 2006 20:23:14 -0800 (PST) Received: by 10.64.233.11 with HTTP; Mon, 13 Nov 2006 20:23:14 -0800 (PST) Message-ID: Date: Mon, 13 Nov 2006 23:23:14 -0500 From: "fulan Peng" To: "Dan Nelson" In-Reply-To: <20061114033146.GA61297@dan.emsphone.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <20061114033146.GA61297@dan.emsphone.com> Cc: freebsd-current@freebsd.org Subject: Re: Please help with ipfw to redirect port 443 to 8892! X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Nov 2006 04:23:17 -0000 Yes, you are right. Now it is working. By the way, if any of you need a chat or conference, this is free for you as long as you set up your Apache as a reverse proxy server or set up Squid reverse proxy server on your site. The chat server is ejabberd running on Open Telecom Protocol in erlang. I have a cluster of ejabberd server. I am also playing YXA sip server with minisip client for VOIP. On 11/13/06, Dan Nelson wrote: > In the last episode (Nov 13), fulan Peng said: > > I have recompiled the CURRENT and 6.1 kernel and added IPFIREWALL. > > All I want to do is to redirect incoming 443 request to 8892 which is > > listening and I have tested out https://breakevilaxis.org:8892 > > working. > > > I added one line in the /etc/rc.firewall file with > > ipfw add 400 fwd 66.29.75.29,443 tcp from any to any 8892 in via "rl0" keep-state > > You probably want "fwd 66.29.75.29,8892 tcp from any to any 443" here. > The command you have would redirect port 8892 to port 443. > > -- > Dan Nelson > dnelson@allantgroup.com >