ipfw + http : apache

Georg Graf georg-ipfw at graf.priv.at
Fri May 2 09:33:12 PDT 2003


On Fri, May 02, 2003 at 03:38:05PM +0300, Martins Dzelde wrote:

[...]

> > 00100    xxx    xxx    divert 8668 ip from any to any
> > 00200    xxx    xxx    allow ip from any to any
> > 65535    0        0        deny ip from any to any

I'm missing the interface of the internet connection of box A in rule
100. You should also check that natd is running with the "-interface
xxxy" option.

Search for "RUNNING NATD" in man natd.

hth,
-- 
Georg Graf       http://georg.graf.priv.at/       PGP Key ID: 0xA5232AD5
Gobergasse 43/2             A-1130 Wien               Tel: +43 1 8796723



More information about the freebsd-ipfw mailing list