IPFW Redirect

[vpeleh]

Hi
Somebody know? can ipfw do redirect packet
(Something like to PF
rdr on ! $ext_if proto tcp from <blocked_user> to any port 80 -> 192168.192.168 port 8080
)

ipfw nat do not work in this way, it only redirect packet that destination to local router...

If somebody know how do that, pleae help
Thanks

[raVen]

ipfw fwd?

[vpeleh]

ipfw fwd only forward packet to destination(it do not change destination field in packet)

[aragon]

I'm thinking you need to use natd and one of its -redirect_* parameters. Then use ipfw divert to divert the relevant traffic through natd.

[aragon]

Something like this:

natd -redirect_port tcp 192.168.192.168:8080
ipfw add 100 divert natd tcp from blocked_user to any 80 in

[vpeleh]

Thanks
I will try

[jleal2003]

You can also use a port redirector like rinetd , it is a very useful tool!! try and let us know what happen!

[r-c-e]

You can also use a port redirector like rinetd , it is a very useful tool!! try and let us know what happen!

I use rinetd a lot when migrating sites from one server to another and love it, easy to setup and can take a beating.

[komeylian]

hi, vpeleh

as well as you want in above (Something like to PF rdr on ! $ext_if proto tcp from <blocked_user> to any port 80 -> 192168.192.168 port 8080)


you should follow bellow :

1) load ipfw module

# kldload ipfw.ko

2) check it by
# kldstat

3) # ipfw add allow ip from any to any

4) # ipfw add fwd 192.168.192.168:8080 tcp from <blocked_user> to any 80

5) for check it use # ipfw show

have fun.

[mlevel]

This rule doesn`t change destination IP-address in TCP-packet!