NATD Reverse Proxy

Olivier Nicole on at cs.ait.ac.th
Fri Sep 26 04:10:43 UTC 2008


> I'm trying to build a server that will act as a gateway between my wireless
> network and the rest of the world.  Here's an overview of the current setup:
> 
> 1. FreeBSD 7.1
> 2. isc-dhcp3-server-3.0.5_2
> 3. natd configured to connect fxp0 (public network, dynamic IP) to fxp1
> (private network, static IP)
> 4. ipfw
> 5. bind
> 6. apache 2.2
> 7. php 5.2.6
> 
> Right now, when someone connects to the private net, they get an IP address
> and can connect to the Internet no problemo.  So, this is all working so
> far.
> 
> What I'd like to do next is this:
> 
> When someone obtains an IP address, I'm going to configure DHCP to block
> that IP using IPFW initially, and I'd like to redirect any requests that
> come from that IP to port 80 or 443 to be silently redirected to the local
> Apache installation, where the user can enter their login and password.
> Once they've been authenticated, the firewall will allow them to connect out
> to everywhere else.

I think that monowall (or pfsense) do that for you.

Best regards,

Olivier


More information about the freebsd-questions mailing list