ipfw script

Robert Johannes rjohanne at piper.hamline.edu
Wed Nov 19 07:01:47 PST 2003


Hello Michael,
I would like to set up an ipfw box.  The kernel is configured, and right
now I've some simple rules active.  Specifically, I have
a private LAN, on 192.168.0.0; the firewall/gateway is 192.168.0.253.
I would like to be able to let in port 80, 25 and 22 from the outside.
Port 80, I need to nat it so it gets forwarded to an internal box.  All
outgoing traffic I want to let through.

Could someone send me a script that would accomplish this, straight
forward, and simply, without leaving any conspicuous gaping holes?

thanks
robert



On Wed, 19 Nov 2003, michael wrote:

> Hello,
>
> i don't know about the other Answers, but here ist mine.
>
> I use ipfw fully and only, it's a little bit newer the ipfilter and
> very good and easy to understand.
>
> Ok, if you have using iptables before, then you get a little
> bit confused, may if you have understand the knowledge-bases,
> then you will find it easy.
>
> If you have Problems with ipfw you can conect me,
> then i would you getting help to create a simple and good
> firewall-start-script.
>
> I have 3 or 4 firewall-scripts for serval circumstances:
>
> a)DSL-subscriber with userland ppp and opening
>   ports to connect from outside
> b)very simple but fuly functionally 1 rule-firewall
>   for clients
> c)Firewall for an internet-bastion and nat on external-interface
> includes ip-accounting based on ipa
> d) Firewall with traffic-shaping/queueing and QOS weight-based
>
> Contact me if you are interested.
>
> Best regards
>
> Michael
> _______________________________________________
> freebsd-ipfw at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"
>




More information about the freebsd-ipfw mailing list