# ipfw add fwd $ROOT_IP,domain ip from any to $SHARE1_IP domain keep-state
I don't understand why this rule works for TCP and doesn't seem to work for UDP.
DNS replies to
$ dig +tcp +short @$SHARE1_IP some_domain_name
but it doesn't for
$ dig +short @$SHARE1_IP some_domain_name
Dig works fine for $ROOT_IP.
$SHARE1_IP and $ROOT_IP are on same host.