From owner-freebsd-questions  Mon May 21 12: 1:59 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from femail13.sdc1.sfba.home.com (femail13.sdc1.sfba.home.com [24.0.95.140])
	by hub.freebsd.org (Postfix) with ESMTP id C339E37B440
	for <freebsd-questions@FreeBSD.ORG>; Mon, 21 May 2001 12:01:56 -0700 (PDT)
	(envelope-from craig-burgess@home.net)
Received: from home.net ([24.0.178.21]) by femail13.sdc1.sfba.home.com
          (InterMail vM.4.01.03.20 201-229-121-120-20010223) with ESMTP
          id <20010521190156.NSAV1874.femail13.sdc1.sfba.home.com@home.net>
          for <freebsd-questions@FreeBSD.ORG>;
          Mon, 21 May 2001 12:01:56 -0700
Message-ID: <3B096746.38E13A34@home.net>
Date: Mon, 21 May 2001 12:06:46 -0700
From: craig burgess <craig-burgess@home.net>
X-Mailer: Mozilla 4.77 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: freebsd-questions@FreeBSD.ORG
Subject: Re: begging assistance: natd/firewall port config
References: <3B03539A.E9C2C4FF@.home.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

in case anyone else needs to know -
the solution for this case was:

'natd -s -m -n xl0 -redirect_port tcp 192.168.0.130:2050-2051 2050-2051'

here the firewall type is OPEN - and needs NO adjustments; don't touch
it.

craig

craig burgess wrote:
> 
> IPFIREWALL statements are compiled into the kernel and natd basically
> works -- ftp and browsers work seamlessly.
> 
> I have tried various permutations of ipfw statements in rc.firewall
> without success. Some are shown below. I need to enable tcp on ports
> 2050 and 2051. The more i read man pages the more confused i get.
> 
> /etc/services
>   teletrac      2050/tcp        #teletrac
>   teletrac      2051/tcp        #teletrac
> 
> /etc/rc.conf:
>   natd_enable="YES"
>   natd_interface="xl0"
>   natd_flags="-s -m"
>   firewall_enable="YES"
>   firewall_type="OPEN"
> 
> /etc/rc.firewall:
>   # Prototype setups.
>   if [ "${firewall_type}" = "open" -o "${firewall_type}" = "OPEN" ];
> then
> 
>   $fwcmd add 300 allow any from 192.168.0.130 to 208.19.xxx.xxx
>   ##$fwcmd add 400 allow tcp from any to any 2051 setup
>   ##$fwcmd add 65001 pass tcp from any to any established
>   ##$fwcmd add 65002 pass tcp from 208.19.xxx.xxx to
> 192.168.0.130:255.255.255.0
> 
>   $fwcmd add 65000 pass all from any to any
> 
>   elif [ "${firewall_type}" = "client" ]; then ....
> 
> thanks in advance
> 
> craig
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message