ip_port-forwarding
  
  
   BACK ..
  
   IP- und Port-Forwarding
   =======================
  
   > cd /usr/src/sys/i386/conf/
   > cp GENERIC MYKERNEL
   > vi MYKERNEL
  
   options         IPFIREWALL
   options         IPFIREWALL_VERBOSE                # Optional
   options         IPFIREWALL_DEFAULT_TO_ACCEPT      # Optional
   options         IPDIVERT
   options         RANDOM_IP_ID                      # Optional
   options         IPSTEALTH                         # Optional
   #options        DUMMYNET                          # Optional
   #options        BRIDGE                            # Optional
  
  
  
   > cd /usr/src
   > make buildkernel KERNCONF=MYKERNEL
   ...
   > make installkernel KERNCONF=MYKERNEL
   > reboot
  
  
  
   > vi /etc/rc.conf
  
   firewall_enable="YES"
   firewall_type="OPEN"
   natd_enable="YES"
   natd_interface="xl0"
   natd_flags="-u -f /etc/natd.conf"
   tcp_drop_synfin="YES"           # Optional
   icmp_drop_redirect="YES"        # Optional
   ifconfig_xl0="inet 198.213.17.133 netmask 255.255.255.240 media 100baseTX mediaopt full-duplex"
   ifconfig_xl1="inet 192.168.20.1/24 media 100baseTX mediaopt full-duplex"
   ifconfig_xl1_alias0="192.168.20.254/32"
   ifconfig_xl1_alias1="192.168.40.1/24"
   ifconfig_xl1_alias2="192.168.40.254/32"
   defaultrouter="198.213.17.142"
   gateway_enable="YES"
  
  
  
   > vi /etc/rc.firewall
  
   DIVDEV="xl0"
   /sbin/ipfw -f flush
   /sbin/ipfw add 00100 allow ip from any to any via lo0
   /sbin/ipfw add 00200 deny  ip from any to 127.0.0.0/8
   /sbin/ipfw add 00300 deny  ip from 127.0.0.0/8 to any
   /sbin/ipfw add 00400 divert natd all from any to any via ${DIVDEV}
   ... (weitere Regeln nach eigenem Wunsch) ...
   /sbin/ipfw add 10000 pass all from any to any
  
  
  
   > vi /etc/natd.conf
  
   ###   man natd
   log yes                         # Optional (logt in der /var/log/alias.log)
   redirect_port tcp 192.168.20.2:80 8002
   redirect_port tcp 192.168.40.2:80 9002
   ...
   redirect_port tcp 192.168.20.253:80 8253
   redirect_port tcp 192.168.40.253:80 9253
  
  
     [IMG]