Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 01 Apr 2003 17:54:16 +0100
From:      John Murphy <jfm@blueyonder.co.uk>
To:        questions@FreeBSD.ORG
Subject:   Re: Firewall
Message-ID:  <k0hj8v0rgq6eugu5sdtfobndjehf7co2th@4ax.com>

next in thread | raw e-mail | index | archive | help
"John Meyer" <john@ast.com.na> wrote:

>add 00100 tcp from any to any
>
>When I disable that as well all seems to work well. It looks like the =
option
>in rc.conf firewall_type=3D"/etc/firewall.ast" does not get interpreted
>correctly.

That rule should certainly have an 'action' keyword eg. allow.

Try 'add 100 allow tcp from any to any'.

>2nd Problem is I need to divert my public ip port 80 to a private ip =
port 80
>what are the steps in natd to follow without compromising my security on=
 the
>private side.

That would require a rule with 'divert' as the action keyword.

man 8 ipfw for the details.

John.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?k0hj8v0rgq6eugu5sdtfobndjehf7co2th>