Tugger the SLUGger!SLUG Mailing List Archives

[SLUG] ipfwadm


Hi guys,
I've been trying to get my head around some old rulesets for ipfwadm as I want to add the feature of forwarding everything sent to say 8088 on my firewall to a particular machine inside my network 192.168.0.2

What I've tried so far is the following:

#Forward Web connections to your web server
/sbin/ipfwadm -F -a accept -b -P tcp -S 0.0.0.0/0 8088 -D 192.168.0.2 80

#Forward Web Connections to outside Web Server
/sbin/ipfwadm -F -a accept -b -P tcp -S 192.168.0.2 80 -D 0.0.0.0/0 1024:65535


I've also tried it with mas in place of accept to no avail. It's been close to 2 years since I've had to mess with this and the tucows howto's (what used to be linux-HOWTO) don't seem to have the howto for it anymore.

can anyone write out the rules required for this action or point me in the direction of any good faq's/howto's.

nb. I'd rather not install ipchains atm as it would mean rewriting all my current rules (unless it's a snap on a 2.0.36 kernel)

Thanks,
Paul