[pf4freebsd] Re: Convert IPFW Ruleset to PF

Mark Atkinson mark-pf at filament.org
Wed Sep 15 21:15:02 PDT 2004


On Mon, 13 Sep 2004, phusion wrote:
> How can I convert this simple ipfw ruleset to pf?
>
> fwcmd="/sbin/ipfw"
> ${fwcmd} -f flush
> ${fwcmd} add divert natd all from any to any via xl0
> ${fwcmd} add pass all from any to any
>
> Let me know. Thanks.

something like this in your /etc/pf.conf

scrub in all random-id no-df fragment reassemble
nat on xl0 from <IF>:network to any -> 192.168.101.245
pass in all
pass out all

replace <IF> with your internal network nic device.

--
Mark Atkinson
mark-pf at filament dot org
(!wired)?(coffee++):(wired);





More information about the freebsd-pf mailing list