From owner-freebsd-questions@FreeBSD.ORG Sun Aug 22 17:08:23 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3DADB16A4CE for ; Sun, 22 Aug 2004 17:08:23 +0000 (GMT) Received: from out007.verizon.net (out007pub.verizon.net [206.46.170.107]) by mx1.FreeBSD.org (Postfix) with ESMTP id CA60343D45 for ; Sun, 22 Aug 2004 17:08:22 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from [192.168.1.3] ([68.160.193.218]) by out007.verizon.net (InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP id <20040822170822.CPWR1210.out007.verizon.net@[192.168.1.3]>; Sun, 22 Aug 2004 12:08:22 -0500 Message-ID: <4128D2FD.9060707@mac.com> Date: Sun, 22 Aug 2004 13:08:13 -0400 From: Chuck Swiger Organization: The Courts of Chaos User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.2) Gecko/20040803 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Henk References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Authentication-Info: Submitted using SMTP AUTH at out007.verizon.net from [68.160.193.218] at Sun, 22 Aug 2004 12:08:21 -0500 cc: freebsd-questions@freebsd.org Subject: Re: IPFW portforwarding / kernel question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Aug 2004 17:08:23 -0000 Henk wrote: > My wish is to forward all incoming tcp traffic that arrives on > 192.168.1.1:4265 to 10.0.10.151:4265 in the local network. > > Question 1: > Can somebody help me out with the right ipfw command to achieve this (or a > link to where *forwarding* is explained). ipfw fwd 10.0.10.151 ip from any to 192.168.1.1 4265 If you do this, you also need to convince the machine at 10.0.10.154 to accept traffic addressed for 192.168.1.1, or you need to use NAT instead. > Question 2: > Do I need to recompile my kernel with the IPFIREWALL_FORWARD option? Yes. -- -Chuck