From owner-freebsd-questions Mon Mar 12 15:26:13 2001 Delivered-To: freebsd-questions@freebsd.org Received: from pteradactyl.vaniercollege.qc.ca (pteradactyl.vaniercollege.qc.ca [205.236.144.2]) by hub.freebsd.org (Postfix) with ESMTP id 50D2237B718 for ; Mon, 12 Mar 2001 15:26:11 -0800 (PST) (envelope-from labrinop@vaniercollege.qc.ca) Received: from vaniercollege.qc.ca (N7-248.vaniercollege.qc.ca [10.1.7.248]) by pteradactyl.vaniercollege.qc.ca (8.9.1/8.9.1) with ESMTP id SAA01828 for ; Mon, 12 Mar 2001 18:29:27 -0500 (EST) Message-ID: <3AAD5B0A.CF9C0CDF@vaniercollege.qc.ca> Date: Mon, 12 Mar 2001 18:26:02 -0500 From: Peter Labrinos X-Mailer: Mozilla 4.76 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-questions@FreeBSD.ORG Subject: using ipfw to redir to proxy Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I have a one-sided firewall controlling access for a large and widely dispersed community. Is there someway that if a packet matches a given rule, I can replace it's destination ip to another fixed ip? ie: if the packet matches rule tcp from 10.1.15.0/24 to any 80 change the 'any' to 10.1.1.13 (which is the address of a proxy server) This is allow the firewall to forward http requests without requiring the client to enable proxy settings. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message