From owner-freebsd-isp@FreeBSD.ORG  Fri Jun 25 18:11:18 2004
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A0BE416A4CE
	for <freebsd-isp@freebsd.org>; Fri, 25 Jun 2004 18:11:18 +0000 (GMT)
Received: from smtp-out4.iol.cz (smtp-out4.iol.cz [194.228.2.92])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 614EE43D48
	for <freebsd-isp@freebsd.org>; Fri, 25 Jun 2004 18:11:18 +0000 (GMT)
	(envelope-from bln@bln.no-ip.org)
Received: from 172.16.1.2 (unknown [83.208.18.168])610AC31620
	for <freebsd-isp@freebsd.org>; Fri, 25 Jun 2004 19:10:24 +0200 (CEST)
To: freebsd-isp@freebsd.org
Date: Fri, 25 Jun 2004 20:10:30 +0200
User-Agent: KMail/1.5.4
References: <028201c45ade$5a6b2f70$6400a8c0@chivas>
In-Reply-To: <028201c45ade$5a6b2f70$6400a8c0@chivas>
MIME-Version: 1.0
Content-Disposition: inline
Message-Id: <200406252009.07593.>
From: Ondra Holecek <bln@bln.no-ip.org>
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Subject: Re: ipfw and mail
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Jun 2004 18:11:18 -0000

On Friday 25 June 2004 20:00, Gustavo A. Baratto wrote:
> Hello guys,
>
> some of our users' ISPs don't allow them to use port 25, so they cannot use
> out mail server.
>
> I want to open a new port (2525) and forward all packets from 2525 to 25
> so, they can use mail.
>
> I tried this in IPFW:
> 0100 119649 44772439 allow tcp from any to me dst-port 25 keep-state
> 0200      0        0 divert 25 ip from any to me dst-port 2525 keep-state
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
this line does something other
try to use this:
 ipfw delete 200
 ipfw add 200 fwd localhost:25 tcp from any to me 2525 keep-state


> 0300 103075 35531648 allow ip from me to any keep-state
> 0400     60     4530 deny log ip from any to any
>
>
> If I telnet directly to port 25, I can get the prompt, but if I telnet to
> port 2525, I get a connection refused.
>
> What should I do in ipfw to forward port 2525 to port 25 tranparently?
>
> Thanks
> _______________________________________________
> freebsd-isp@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"