Home / server / Questions / 214765
In Process
adopilot
Asked: 2010-12-22 00:30:06 +0800 CST

Is it possibile to alow port forwarding only for specific IP public addresses

  • 772

I have freeBSD router and it host public IP address, I am using ipnat.rules to configure port forwarding prom public network inside my private network. Now I wondering can I restrict only specific public IP addresses to can pass trough my port forwarding. What I want is to only my specific public IP addresses can walk inside my network on specific ports. Here is how now look like my ipnat.rules file

rdr fxp0 217.199.XXX.XXX/32 port 7900-> 192.168.1.12 port 80 tcp
nat freebsd port-forwarding

1 Answers

  1. You should use a firewall like PF/IPF/IPFW to allow only specified IP addresses to access port 7900 on your router/gateway. PF can actually do all of the NAT stuff for you as well. If you to keep using IPNAT to handle your NAT, you can use IPFW or IPF to limit what hosts can access a port.

    Here's the FreeBSD page that lays out the differences between firewalls:

    http://www.freebsd.org/doc/handbook/firewalls.html

    • 1