All in one machine running w/ Dansguardian+Squid+IPFW

Julian Elischer julian at elischer.org
Thu Sep 9 15:30:14 UTC 2010


On 9/8/10 11:26 PM, Ian Smith wrote:
> On Wed, 8 Sep 2010, Julian Elischer wrote:
>   >  On 9/8/10 4:44 PM, Tony wrote:
>   >  >  my setup looks like this
>   >  >
>   >  >  PC1 ->   browser ->   firewall(redirects port 80 to 8888) ->   dansguardian(
>   >  >  127.0.0.1:8888) ->   squid(127.0.0.1:3333) ->   internet
>   >  >
>   >  >  keep in mind that everything you see above are all on the same PC1
>   >  >
>   >
>   >  you may need to use divert and natd to achieve the effect you require.
>
> Is this a case where in-kernel NAT wouldn't work as well?
>
> Or haven't apple incorporated that into their ipfw?

I have doubts as to whether either ipfw forward OR in-kernel nat are 
in their version of the stack.
(I have no proof but....)

>
> cheers, Ian



More information about the freebsd-ipfw mailing list