董佑龍 <[EMAIL PROTECTED]> writes:
> Hello:
> My English is not good. I am sorry about this first. ~_~
You made yourself clear. Better than "good enough."
> My system: FreeBSD + IPFW + NAT
>
> Question 1: about NAT (in FreeBSD)
> I built a "natd.conf" and it's contents are below:
> redirect_address 192.168.0.1 140.115.10.22
>
> I have 2 computers in the LAN: 192.168.0.200 and
> 192.168.0.201.
> The redirect rule (above) will affect any connection which
> destination is 140.115.10.22.
> But, I don't want this rule to redirect the packets sent
> from 192.168.0.200.(ie. This rule will affect all nodes inside the LAN but
> 192.168.0.200) Can I make it?
Yes. What you do is make sure that packets from that address don't
get sent to the divert socket in your ipfw ruleset. For example, you
could use a "skipto" rule before the divert rule.
> Question 2: about Firewall (in FreeBSD)
> Is there any argument in IPFW just like the function of the
> "redirect_address" in NAT can be used? If it is, I think it may can solve
> the above problem.
Not exactly. You can use a "fwd" rule, but the destination IP address
won't be changed. The machine you forward to won't accept the packets
because its address isn't 140.115.10.22.
--
Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
