Simple ipfw problem :(

[Dmitry Mityugov]

On 6/23/05, Peter <peterpub1 at aboutsupport.com> wrote:
> Hi,
> 
> with my old linux box I forward all my LAN traffic coming from eth1 via
> eth0 with these simple 3 lines
> 
> $IPTABLES -t nat -A POSTROUTING -o $INET_IFACE -j MASQUERADE
> $IPTABLES -A FORWARD -i $LAN_IFACE -j ACCEPT
> $IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
> 
> Howevr I moved the box to FreeBSD 5.4 and also I have a new connection
> PPPoE. I enabled the IPDIVERRT,    FIRREWALL etc in the kernel but I am
>   unable to make traffic coming from rl0(internal interface) be
> forwaded via tun0( PPPoE interface).
> 
> I have gateway_enable='yes', tried playing with ppp_nat etc...
> 
> But no luck....
> 
> Is there a simple way to do that with ipfw ? Please help - I am little
> bit confused...
> 
> Thanks in advance for your help...
> 
> Kind regards,
> 
> Peter

Hi Peter,

There is a nice chapter in FreeBSD handbook that describes how rules
for ipfw might look like to do NAT:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html.
I had no problems setting my firewall using that chapter as a starting
point.

-- 
Dmitry

"We live less by imagination than despite it" - Rockwell Kent, "N by E"