Transparent redirect to another interface ?
Daan Vreeken [PA4DAN]
Danovitsch at vitsch.net
Thu Feb 22 13:48:52 UTC 2007
On Thursday 22 February 2007 12:55, Frank Bonnet wrote:
> I have a new mailhub with two ethernet gigabit interfaces, and I would like
> to transparently redirect IMAP or POP3 requests to the second interface
> which have a different IP address, to let the first interface drive the
> SMTP traffic only.
> Is it possible ? This will avoid thousands of email clients
> re-configuration to let users grab their incomming emails.
"natd" can be used to do this.
The following example assumes your external interface is called "sk0" and the
seconde interface, connecting to the second server, is called "sk1" :
# Start natd and tell it to forward pop3 traffic to the second server
natd -n sk0 -redirect_port tcp ip_of_second_server_here:110 110
# Add ipfw rule to send incoming pop3 traffic through natd
ipfw add 1000 divert natd tcp from any to me 110 via sk0
# Add ipfw rule to send responses from second server through natd
ipfw add 1010 divert natd tcp from ip_of_second_server_here 110 to any via
# or just use one ipfw rule :
ipfw add 1000 divert natd all from any to any via sk0
But this will send ALL traffic through natd, only sending traffic that needs
to be redirect through it is far more efficient.
Hope this helps,
More information about the freebsd-questions