Re: Re[2]: icmp problem

From: george roman (thewolfro_at_yahoo.com)
Date: 05/16/05

  • Next message: george roman: "Re: Re[2]: icmp problem"
    Date: Mon, 16 May 2005 00:31:14 -0700 (PDT)
    To: freebsd-security@freebsd.org
    
    

    i think i know what my problem is
    for nat i didn't use divert with ipfw, instead i used
    /etc/ipnat.rules file where i put something like this:

    map fxp0 192.168.66.16/32 -> external_ip/32

    for each host that should get nat-ed

    i will try the divert command to see what happends

                    
    __________________________________
    Yahoo! Mail Mobile
    Take Yahoo! Mail with you! Check email on your mobile phone.
    http://mobile.yahoo.com/learn/mail
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"


  • Next message: george roman: "Re: Re[2]: icmp problem"

    Relevant Pages

    • Re: Re[2]: icmp problem
      ... > for nat i didn't use divert with ipfw, ... > Take Yahoo! ... To unsubscribe, ...
      (FreeBSD-Security)
    • Re: ipfw divert with exception?
      ... but putting the exception rules before the ... Subject: ipfw divert with exception? ... > natd for address translation, and I have rule like so: ...
      (freebsd-questions)
    • Re: ipfw and divert and trying to do something clever (never mind)
      ... > I have some machines behind a freebsd firewall, and I'm using ipfw. ... > but I'd like to divert them to my own smtp server, ... > University of Waterloo ...
      (freebsd-questions)
    • Re: IPFW: combining "divert natd" with "keep-state"
      ... should the dynamic rules be created to match the pre-NAT ... > or post-NAT packets? ... I have found an "endless-loop problem" with ipfw when using both ... `divert' and `keep-state'/`check-state' rules. ...
      (FreeBSD-Security)
    • Re: small tun(4) improvement
      ... DIVERT sockets in themselfes do not depend on ipfw. ... packets just fine through a diver socket even when ipfw is missing. ...
      (freebsd-net)