IPFW - Two External Interfaces

Dennis Olvany dennisolvany at gmail.com
Tue May 16 20:35:54 PDT 2006


PFS IT wrote:
> I am complicating the use of IPFW...

> Here is a pretty ascii picture. I drawed it meself.

>         ISP 1
>    [192.168.2.254]
>           |
>           |
> [bge1:192.168.2.1]
>           FIREWALL[bge0:10.0.0.1]-------[10.0.0.2]internal_system
>  [em0:192.168.1.1]
>           |
>           |
>    [192.168.1.254]
>         ISP 2



> #Send traffic to natd
> divert 8869 ip from any to any via bge1
> divert 8868 ip from any to any via em0

> #Send "special" traffic out via em0
> fwd $isp2_gw ip from $internal_system to $remote_system 80

> $internal_system# hping -STp 80 $remote_system
> 
> Should result in a trace across em0 to google


More information about the freebsd-questions mailing list