From owner-freebsd-questions@FreeBSD.ORG  Mon Sep 26 21:12:30 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9F51016A41F
	for <freebsd-questions@freebsd.org>;
	Mon, 26 Sep 2005 21:12:30 +0000 (GMT) (envelope-from peter@bgnett.no)
Received: from vs2.bgnett.no (vs02.bgnett.no [194.54.96.190])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 46D2C43D53
	for <freebsd-questions@freebsd.org>;
	Mon, 26 Sep 2005 21:12:29 +0000 (GMT) (envelope-from peter@bgnett.no)
Received: from amidala.datadok.no.bgnett.no ([194.54.107.19])
	by vs2.bgnett.no (8.12.9p2/8.12.9) with ESMTP id j8QLCRpM041511
	for <freebsd-questions@freebsd.org>;
	Mon, 26 Sep 2005 23:12:28 +0200 (CEST)
	(envelope-from peter@bgnett.no)
To: freebsd-questions@freebsd.org
References: <dc6701ba05092610251935f2e6@mail.gmail.com>
From: peter@bgnett.no (Peter N. M. Hansteen)
Date: Mon, 26 Sep 2005 23:11:32 +0200
In-Reply-To: <dc6701ba05092610251935f2e6@mail.gmail.com> (Carstea Catalin's
	message of "Mon, 26 Sep 2005 18:25:52 +0100")
Message-ID: <86u0g7o7p7.fsf@amidala.datadok.no>
User-Agent: Gnus/5.1007 (Gnus v5.10.7) XEmacs/21.4.17 (Jumbo Shrimp,
	berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-bgnett.no-virusscanner: Found to be clean
X-bgnett.no-SpamScore: ssss
X-Envelope-To: freebsd-questions@freebsd.org
Subject: Re: For administrators setting-up pf
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 26 Sep 2005 21:12:30 -0000

Carstea Catalin <carstea.catalin@gmail.com> writes:

> i want to setting up my firewall pf with some rules to do 2 conditions:
> Deny all except:
> 2. permit only for 3 users access to pop3 ( ex.: nat only for 3 users
> and only for pop3)

For this, you might want to look into authpf. it lets you set up per
user rules which might be what you are looking for.

> 3. redirect all port  to 8080 for all users. I use proxy for cache and
> log traffic.

You can redirect to eg squid or another proxy. All ports sounds a bit
ambitious - Daniel Hartmeier has a nice writeup on how to set up a
transparent squid at http://www.benzedrine.cx/transquid.html

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
"First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales"