ipfw的内核natd使用手册（摘自ipfw man）

NETWORK ADDRESS TRANSLATION (NAT)
     The nat configuration command is the following:
           nat nat_number config nat-configuration
     The following parameters can be configured:
     ip ip_address
             Define an ip address to use for aliasing.
     if nic  Use ip addres of NIC for aliasing, dynamically changing it if
             NIC's ip address change.
     log     Enable logging on this nat instance.
     deny_in
             Deny any incoming connection from outside world.
     same_ports
             Try to leave the alias port numbers unchanged from the actual
             local port numbers.
     unreg_only
             Traffic on the local network not originating from an unregistered
             address spaces will be ignored.
     reset   Reset table of the packet aliasing engine on address change.
     reverse
             Reverse the way libalias handles aliasing.
     proxy_only
             Obey transparent proxy rules only, packet aliasing is not per-
             formed.
     To let the packet continue after being (de)aliased, set the sysctl vari-
     able net.inet.ip.fw.one_pass to 0.  For more information about aliasing
     modes, refer to
libalias(3)
See Section EXAMPLES for some examples about
     nat usage.
REDIRECT AND LSNAT SUPPORT IN IPFW
     Redirect and LSNAT support follow closely the syntax used in
natd(8)
See
     Section EXAMPLES for some examples on how to do redirect and lsnat.
NAT, REDIRECT AND LSNAT
     First redirect all the traffic to nat instance 123:
           ipfw add nat 123 all from any to any
     Then to configure nat instance 123 to alias all the outgoing traffic with
     ip 192.168.0.123, blocking all incoming connections, trying to keep same

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有