Please help with ipfw to redirect port 443 to 8892!

fulan Peng fulanpeng at gmail.com
Mon Nov 13 18:08:32 PST 2006


Hi,
I have recompiled the CURRENT and 6.1 kernel and added IPFIREWALL. All
I want to do is to redirect incoming 443 request to 8892 which is
listening and I have tested out https://breakevilaxis.org:8892
working.
I added one line in the /etc/rc.firewall file with
ipfw add 400 fwd 66.29.75.29,443 tcp from any to any 8892 in via "rl0"
keep-state

breakevilaxis# ipfw -t list
00100 Mon Nov 13 16:45:36 2006 allow ip from any to any via lo0
00200                         deny ip from any to 127.0.0.0/8
00300                         deny ip from 127.0.0.0/8 to any
00400                         fwd 66.29.75.20,443 tcp from any to any
dst-port 8892 in via rl0 keep-state
65000 Mon Nov 13 16:48:02 2006 allow ip from any to any
65535                         deny ip from any to any

Now when I type https://66.29.75.20, it won't redirect to port 8892.
Please help me to redirect port 443 to 8892. Seems FreeBSD does not
allow any one to use port below 1024 except root but all of the port
applications configured to run as non-root users such www. I checked
pf. It is even complicated than ipfw. It needs compiling the kernel
with some file system. When I type pf -e, it says /dev/pf file or
directory not exists. So I have to give up pf. In CURRENT, there is a
port of PAM, but there is no PAM in 6.1. I have got PAM working in
CURRENT to redirect port 80 to port 8080.


More information about the freebsd-current mailing list