[pf4freebsd] Re: Convert IPFW Ruleset to PF

Mark Atkinson mark-pf at filament.org
Wed Sep 15 21:15:07 PDT 2004


On Tue, 14 Sep 2004, Mark Atkinson wrote:
> On Mon, 13 Sep 2004, phusion wrote:
> > How can I convert this simple ipfw ruleset to pf?
> >
> > fwcmd="/sbin/ipfw"
> > ${fwcmd} -f flush
> > ${fwcmd} add divert natd all from any to any via xl0
> > ${fwcmd} add pass all from any to any
> >
> > Let me know. Thanks.
>
> something like this in your /etc/pf.conf
>
> scrub in all random-id no-df fragment reassemble
> nat on xl0 from <IF>:network to any -> 192.168.101.245
> pass in all
> pass out all
>
> replace <IF> with your internal network nic device.

also replace the 192.168.101.245 ip with your public/routable ip address.

> --
> Mark Atkinson
> mark-pf at filament dot org
> (!wired)?(coffee++):(wired);




More information about the freebsd-pf mailing list