Changeset 8026 for 2.0

Timestamp:

May 25, 2010, 3:21:05 PM (15 years ago)

Author:

rick

Message:

There is no firewall config on the proxy yet. Pre-configure inbound NAT

File:

• 2.0/nanobsd/nanobsd/files/etc/ipfw.sh (modified) (2 diffs)

2.0/nanobsd/nanobsd/files/etc/ipfw.sh

@@ -45 +45 @@
 ${fwcmd} add 65000 pass all from any to any
 
+
+############
+# Inbound NAT setup
+${fwcmd} add nat 100 all from any to 172.16.0.0/12 via $internalif
+${fwcmd} nat 100 config if $internalif
+
+############
 # Transproxy/WLportal/Captive portal
-${fwcmd} add 10000 allow tcp from any to localhost 80
-${fwcmd} add 10001 allow tcp from any to me 80
+# ${fwcmd} add 10000 allow tcp from any to localhost 80
+# ${fwcmd} add 10001 allow tcp from any to me 80
 
 ############
@@ -54 +61 @@
 
 # Forward rules work without a base address, so needed a loop over all inet4 adresses
-for IP in `ifconfig -a | awk '/inet / {print $2}'`; do
-  ${fwcmd} add 10100 fwd $IP,8081 tcp from any to not 172.16.0.0/12 80
-done
+# for IP in `ifconfig -a | awk '/inet / {print $2}'`; do
+#   ${fwcmd} add 10100 fwd $IP,8081 tcp from any to not 172.16.0.0/12 80
+# done