IPFW and natd

vladone vladone at spaingsm.com
Wed Sep 6 19:41:33 UTC 2006


Hello Mike,

Wednesday, September 6, 2006, 10:16:22 PM, you wrote:

> I have clients connecting behind a firewall on 10.xxx.xxx.xxx ip's. The
> external ip is on a 208.xxx.xxx.xxx block.  I need to assign certain clients
> behind the firewall their own static external ip that is accessible from the
> outside and also make sure they go out using this ip.  I have been unable to
> get this to work.  I have the firewall working fine with natd.  Any help
> would greatly be appreciated.

> Thanks
> Mike
> GlobalNet

> _______________________________________________
> freebsd-ipfw at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to
> "freebsd-ipfw-unsubscribe at freebsd.org"

Use redirect_address option in natd.conf to assign ip's and option
"unregistered_only yes", to do natd only for private classes.
Example natd.conf (asuming that xl0 is public interface)
use_sockets yes
same_ports yes
interface xl0
dynamic yes
unregistered_only yes
redirect_address 192.168.0.10 208.xxx.xxx.xxx
.............................................
-- 
Best regards,
 vladone                            mailto:vladone at spaingsm.com



More information about the freebsd-ipfw mailing list