[pf4freebsd] Re: Convert IPFW Ruleset to PF

[Max Laier]

On Tuesday 14 September 2004 16:54, Mark Atkinson wrote:
> On Tue, 14 Sep 2004, Mark Atkinson wrote:
> > On Mon, 13 Sep 2004, phusion wrote:
> > > How can I convert this simple ipfw ruleset to pf?
> > >
> > > fwcmd="/sbin/ipfw"
> > > ${fwcmd} -f flush
> > > ${fwcmd} add divert natd all from any to any via xl0
> > > ${fwcmd} add pass all from any to any
> > >
> > > Let me know. Thanks.
> >
> > something like this in your /etc/pf.conf
> >
> > scrub in all random-id no-df fragment reassemble
> > nat on xl0 from <IF>:network to any -> 192.168.101.245
> > pass in all
> > pass out all
> >
> > replace <IF> with your internal network nic device.
>
> also replace the 192.168.101.245 ip with your public/routable ip address.

Or use:

ext_if="xl0"
int_if="xl1"
nat on $ext_if from $int_if:network to any -> ($ext_if)

which will keep track of address changes on $ext_if as well.

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20040914/4b07b857/attachment.bin