Re: IPFilter and P3Scan

Greetings,

Let's make some assumptions:
fxp0 is your external NIC - external IP address
fxp1 is your internal NIC, ip address 192.168.0.254.

You want to redirect any traffic from your internal LAN heading to the
outside world on port 110, to your localhost to where the special POP3
filter daemon is listening.

cat /etc/ipnat.rules
rdr fxp1 0.0.0.0/0 port 110 -> 192.168.0.254 port 8110

ipnat -CF -f /etc/ipnat.rules

(You should also create a ipfilter rule to allow this traffic, probably only
TCP).

Regards,

Dave Seddon

Fabrice writes:

> Dave+Seddon a écrit :
>
>> Greetings,
>> Are you sure the ipfilter module is loaded, or built into the kernel?
>> That error looks a lot like it's not.
>> Also, please post the example IPFW rules, and we'll easily confirm the
>> conversion to ipf.
>
> The example is :
> ipfw add fwd 192.168.0.254,8110 tcp from 192.168.0.0/24 to any pop3
>
> Regards
> FAbrice
>
>> Regards,
>> Dave Seddon
>>
>> Fabrice writes:
>>
>>> Hi,
>>> This week, I 've installed P3Scan package on a FreeBSD 4.9R to filter
>>> pop3 (for viruses) through my firewall.
>>> The description of the P3Scan package explain how to use with ipfw, but
>>> no with IPFilter.
>>> P3Ssan listen on the 8110 port, so I've tried to do :
>>> map external_interface internal_lan/24 -> external_address/32 proxy
>>> port 8110 pop3/tcp
>>> but ipnat doesn't like this rule :
>>> 1:ioctl(SIOCADNAT): No such file or directory
>>> How can I do to filter transparently pop3 with IPF ?
>>> Thanks
>>> FAbrice
>>
>>
>>
>>
>