From owner-freebsd-questions@FreeBSD.ORG Wed Dec 2 23:09:26 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7CA941065694 for ; Wed, 2 Dec 2009 23:09:26 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from asmtpout027.mac.com (asmtpout027.mac.com [17.148.16.102]) by mx1.freebsd.org (Postfix) with ESMTP id 682E88FC21 for ; Wed, 2 Dec 2009 23:09:26 +0000 (UTC) MIME-version: 1.0 Content-type: text/plain; charset=koi8-r Received: from cswiger1.apple.com ([17.227.140.124]) by asmtp027.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01 (built Dec 16 2008; 32bit)) with ESMTPSA id <0KU100EBASBPW120@asmtp027.mac.com> for freebsd-questions@freebsd.org; Wed, 02 Dec 2009 15:09:26 -0800 (PST) From: Chuck Swiger X-Priority: 3 (Normal) In-reply-to: <1769502890.20091203002439@yandex.ru> Date: Wed, 02 Dec 2009 15:09:25 -0800 Content-transfer-encoding: quoted-printable Message-id: References: <83917882.20091202221037@yandex.ru> <62A5826A-19D7-4743-B95E-28FF7777776A@mac.com> <1235656966.20091202233935@yandex.ru> <1769502890.20091203002439@yandex.ru> To: =?koi8-r?B?68/O2MvP1yDl18fFzsnK?= X-Mailer: Apple Mail (2.1077) Cc: freebsd-questions@freebsd.org Subject: Re: Re[3]: How to change dst IP in packet with IPFW X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Dec 2009 23:09:26 -0000 Hi-- On Dec 2, 2009, at 2:24 PM, =EB=CF=CE=D8=CB=CF=D7 =E5=D7=C7=C5=CE=C9=CA = wrote: > Actually I have google clue: http://gara.opennet.ru/http_redirect.html > but it is impossible to implement that with IPFW NAT. > And now -a and -proxy_only are exclusive but in article as you can sen > in examples they are not. article is dated 2002 year. >=20 > NOTICE that src addr is not aliased to 10.11.19.1! >=20 > kes# natd -a 10.11.19.1 -proxy_only yes -proxy_rule port 80 server = 10.11.8.16:80 -v Well, yes, if you are using proxy_only, you are explicitly disabling = normal NAT rewriting of addresses-- the proxy_only thing is intended for = "transparent proxies" which listen for all incoming traffic on the = proxied ports regardless of whether the traffic is being sent to an IP = address which the machine considers to be local. As I said earlier, if you want to change the src addr, use = redirect_address functionality instead of proxy_only. Regards, --=20 -Chuck