[fwd] IPFW fwd to remote address (from: iaccounts@ibctech.ca)

[Dancho Penev]

----- Forwarded message from Steve Bertrand <iaccounts at ibctech.ca> -----

From: "Steve Bertrand" <iaccounts at ibctech.ca>
To: freebsd-ipfw at freebsd.org
Date: Fri, 9 Jul 2004 12:44:33 -0400 (EDT)
Subject: IPFW fwd to remote address

I am trying to set up a forward from one machine to another on a remote
network across the Internet.

I want to receive requests on one box on port 8080 and simply forward them
to a remote machine on the same port. I have tried the following rules, to
no avail. I have IPFIREWALL_FORWARD in my kernel (4.10), and # ipfw show
reports the hits to the rule.

# ipfw add 1000 fwd 216.209.x.x tcp from any to me 8080
# ipfw add 1000 fwd 216.209.x.x,8080 tcp from any to me 8080
# ipfw add 1000 fwd 216.209.x.x tcp from any to me 8080
# ipfw add 1000 fwd 216.209.x.x,8080 from any to any 8080

I can not see the packets going back out of the machine, nor does ipfw log
anything at the other end. # tcpdump at the remote end does not pick up
any traffic.

Does this have something to do with the fact that I am going across the
Internet, and it is trying to route the packets back to itself (I
understand the dest does not get changed). If so, how could I re-write the
packets so they will get delivered?

Tks for any help on this

Steve

_______________________________________________
freebsd-ipfw at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"


----- End forwarded message -----


You have answered yourself why doesn't forwarding work at this
situation. If you want to forward http traffic you may try
squid (www/squid) in accelerator mode.

-- 
Dancho Penev

GnuPG public key: http://www.mnet.bg/~dpenev/gnupg.asc
Key fingerprint: E88D 8B7B 3EF6 E9C8 C5D2  7554 2AA8 C347 71A1 4277
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040709/1b9bfa08/attachment.bin