From owner-freebsd-questions Mon Feb 3 14:22:23 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 660C037B401 for ; Mon, 3 Feb 2003 14:22:22 -0800 (PST) Received: from saexchange.softwarealternative.com (saexchange.softwarealternative.com [66.45.84.192]) by mx1.FreeBSD.org (Postfix) with SMTP id C1D8143F93 for ; Mon, 3 Feb 2003 14:22:21 -0800 (PST) (envelope-from fbsdq@kuyarov.org) Received: (qmail 16178 invoked from network); 3 Feb 2003 22:12:53 -0000 Received: from 12-254-119-134.client.attbi.com (HELO server.home.pk) (12.254.119.134) by saexchange.softwarealternative.com with SMTP; 3 Feb 2003 22:12:53 -0000 Date: Mon, 3 Feb 2003 15:23:11 -0700 From: Peter To: freebsd-questions@freebsd.org Subject: FBSD firewall in front of windows IIS servers HOW Message-Id: <20030203152311.7af897d4.fbsdq@kuyarov.org> X-Mailer: Sylpheed version 0.8.6 (GTK+ 1.2.10; i386-portbld-freebsd4.7) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hello, Just wondering what would be the best way to do this... INTERNET----FBSD FIREWALL----WINDOWS IIS SERVER Basically what would be the best way to have freebsd accept incoming connections, run them thru the firewall, and all the packets that pass forward them to internal windows machines. I dont' want the windows boxen directly on the net, I want to put a FBSD firewall in front of them, and so far the best option I've found on how to do this is to have the windows boxen be 192.168.x.x and have the fbsd boxen forward all connections to "public_ip" to the windows box via natd. Does this seem like a good plan? Or anyone know of another better way to do this? -------------- Innovation is hard to schedule. -- Dan Fylstra ---FreeBSD The Power To Serve--- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message