Date: Wed, 3 Sep 2008 10:41:36 +0200 From: "Marcel Grandemange" <thavinci@thavinci.za.net> To: <freebsd-questions@freebsd.org> Subject: IPFW In FreeBSD Message-ID: <02be01c90da0$e03555d0$a0a00170$@za.net>
next in thread | raw e-mail | index | archive | help
Ok so I know this is a newbie question..
But ive for years now wanted to know how to only nat certain traffic or maby
only across a certain ip.
Ive tried many examples all not working.. Maby im just doing something
stupid..
But, below is a example of a machine that is natting everything on em0.
Id like to know how to change that to everything on say 196.212.65.186
instead of entire interface.
Or better yet..
Stop natting everything and say only nat web traffic.
Im having issues where certain traffic is being nated that MUSTN be!
Would be REALLY greatfull for input and working examples!
00013 6613581 1024484770 fwd 127.0.0.1,3128 tcp from not me to not me
dst-port 80 via em1
00015 3678 424024 fwd 127.0.0.1,3128 tcp from not me to not me
dst-port 8080 via em1
00025 24596697 12747712371 divert 8668 ip from any to any via em0
00600 0 0 deny ip from any to 196.212.65.186 dst-port 3306
via em0
00600 0 0 deny ip from any to 196.212.65.187 dst-port 3306
via em0
00600 7 408 deny ip from any to 196.212.65.187 dst-port 22
via em0
00600 0 0 deny ip from any to 196.212.65.187 dst-port 199
via em0
00600 0 0 deny ip from any to me dst-port 3401 via em0
00600 0 0 deny ip from any to 192.168.239.1 dst-port 3306
via em1
00600 883 49232 deny icmp from any to 196.212.65.187 via em0
00660 86202 39746084 deny udp from me to any dst-port 520 not via em1
00700 46353458 25934143975 allow ip from any to any
65535 0 0 deny ip from any to any
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=19b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4>
ether 00:30:48:90:c8:28
inet 196.212.65.186 netmask 0xfffffff8 broadcast 196.212.65.191
inet 196.212.65.187 netmask 0xfffffff8 broadcast 196.212.65.191
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
#Nat
natd_enable="YES" # Enable NATD function
natd_flags="-dynamic"
natd_interface="em0" # interface name of public Internet NIC
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?02be01c90da0$e03555d0$a0a00170$>