6 Replies to “IPFW3 and NAT”

  1. I’ve made some small changes and it worked like a charm (INT-NIC: bnx0, OUT-NIC: bnx1):

    #!/bin/sh
    kldload ipfw3_nat
    kldload ipfw3_layer4

    ipfw3 flush

    ipfw3 add allow all via lo0
    ipfw3 add allow all via bnx0

    ipfw3 nat 1 config if bnx1
    ipfw3 add nat 1 tcp via bnx1

    ipfw3 add check-state
    ipfw3 add deny tcp established
    ipfw3 add allow all out via bnx1 keep-state

    ipfw3 add deny all

Comments are closed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)

Mentions

  • bycn82
  • bycn82
  • Nobody
  • DragonCanFly
  • Nans
  • Anonymous