From owner-freebsd-questions  Mon Jun 25 11:35:19 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from web11706.mail.yahoo.com (web11706.mail.yahoo.com [216.136.172.72])
	by hub.freebsd.org (Postfix) with SMTP id 1911A37B401
	for <questions@FreeBSD.ORG>; Mon, 25 Jun 2001 11:35:13 -0700 (PDT)
	(envelope-from tperlin@yahoo.com)
Message-ID: <20010625183512.91569.qmail@web11706.mail.yahoo.com>
Received: from [63.200.148.220] by web11706.mail.yahoo.com; Mon, 25 Jun 2001 11:35:12 PDT
Date: Mon, 25 Jun 2001 11:35:12 -0700 (PDT)
From: Tim Erlin <tperlin@yahoo.com>
Subject: Re: ipfw  -- fwd, divert, natd -redirect_port?
To: Nick Rogness <nick@rogness.net>
Cc: questions@FreeBSD.ORG
In-Reply-To: <Pine.BSF.4.21.0106251446260.42332-100000@cody.jharris.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Thanks, very helpful.

So is there a distinction between adding a divert
statement to my ipfw config and adding a
-redirect_port statement to my natd config file? 

--Tim
--- Nick Rogness <nick@rogness.net> wrote:
> On Mon, 25 Jun 2001, Tim Erlin wrote:
> 
> > I currently have 4.3-STABLE running NAT on my
> DSL(static ip). I'd like
> > to put a webserver (or any other service) behind
> it and map the
> > incoming port appropriately. I see three choices
> with ipfw and I'm not
> > sure what the differences are.
> > 
> 
> 	Well, there's only 2  natd and divert are the same.
>  Besides, you
> 	need to use nat for this.
> 
> > How does fwd differ from divert differ from
> running natd with
> > -redirect_port?
> 
> 	natd must be run in conjunction with divert (That
> is how the natd
> 	daemon receives packets from the kernel).  Like so:
> 
> 		ipfw divert natd ip from any to any via xl0
> 
> 	fwd is an ipfw firewall rule extention, like so:
> 
> 		ipfw fwd 10.0.0.1 ip from any to any out via xl0
> 
> Nick Rogness <nick@rogness.net>
>  - Keep on Routing in a Free World...
>   "FreeBSD: The Power to Serve!"
> 


__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message