FW: ipfw and nat problem

[Grégoire Leroy]

Hi,

> >I just cant seem to understand in and out.
> >Does in mean INTO the BOX or into the specific interface what happens if
> >you don¹t specify an interface when u say in or out?
> >OR does in mean into the internal network from outside or just into the
> >box?

in and out are filters, like from and to. If you don't specify the interface, 
it'll match all packets which go into the box (or go out, for out).
If you specify an interface, it'll be more precise.

Example :

# In and out packets which go through outgoing interface
from any to any via oif

# idem, but in packets only
from any to any in via oif

# out packets through all interfaces
from any to any out

Regards,
Grégoire Leroy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 230 bytes
Desc: This is a digitally signed message part.
Url : http://lists.freebsd.org/pipermail/freebsd-ipfw/attachments/20110718/3be5e0a0/attachment.pgp