From owner-freebsd-ipfw@FreeBSD.ORG Wed Aug 25 17:42:08 2004 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 720DD16A4D0 for ; Wed, 25 Aug 2004 17:42:08 +0000 (GMT) Received: from mail.esoltani.com (fwnat.esoltani.com [67.120.127.181]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2F56443D1F for ; Wed, 25 Aug 2004 17:42:08 +0000 (GMT) (envelope-from patrick@esoltani.com) Received: from localhost (localhost [127.0.0.1]) by mail.esoltani.com (Postfix) with ESMTP id A52E98FC3C; Wed, 25 Aug 2004 10:42:07 -0700 (PDT) Received: from mail.esoltani.com ([127.0.0.1]) by localhost (baba.esoltani.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 81954-08; Wed, 25 Aug 2004 10:41:57 -0700 (PDT) Received: from [192.168.1.105] (khanoom.esoltani.com [192.168.1.105]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.esoltani.com (Postfix) with ESMTP id F1A938FC1F; Wed, 25 Aug 2004 10:41:56 -0700 (PDT) Message-ID: <412CD042.8010800@esoltani.com> Date: Wed, 25 Aug 2004 10:45:38 -0700 From: patrick User-Agent: Mozilla Thunderbird 0.7.3 (Windows/20040803) X-Accept-Language: en-us, en MIME-Version: 1.0 To: fbsd-ipfw@0x10.com References: <412BA814.9060406@esoltani.com> In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at esoltani.com cc: freebsd-ipfw@freebsd.org Subject: Re: natd and ipfw problems...hope this is the right place=) X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Aug 2004 17:42:08 -0000 fbsd-ipfw@0x10.com wrote: > > Thanks for the advise, aren't any fwd/divert rules required in ipfw? > -Fraser yes, and that is part of the initial natd setup. I have something like this: ${fwcmd} add divert natd all from any to any via ${oif} Once your nat is working, that's the only divert you need. Regards, Patrick Soltani.