6 Replies to “IPFW3 and NAT”

  1. I’ve made some small changes and it worked like a charm (INT-NIC: bnx0, OUT-NIC: bnx1):

    #!/bin/sh
    kldload ipfw3_nat
    kldload ipfw3_layer4

    ipfw3 flush

    ipfw3 add allow all via lo0
    ipfw3 add allow all via bnx0

    ipfw3 nat 1 config if bnx1
    ipfw3 add nat 1 tcp via bnx1

    ipfw3 add check-state
    ipfw3 add deny tcp established
    ipfw3 add allow all out via bnx1 keep-state

    ipfw3 add deny all

Comments are closed.