[Firehol-support] Re: Firehol & Routing

[Daniel Pittman]

On 28 Jan 2005, Jean-Michel Hiver wrote:
> I have discovered firehol some time ago, and it's lovely work!
>
> I would like to know if it's possible to do routing with firehol. For 
> example, at the moment on my box I have this:
>
> Destination Passerelle Genmask Indic Metric Ref Use
> Iface
> nsreu103.france *               255.255.255.255 UH    0      0        0 
> ippp0
> 10.0.0.0        *               255.255.255.0   U     0      0        0 
> bond0
> 192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
> default         nsreu103.france 0.0.0.0         UG    0      0        0 
> ippp0
> root at stargazer:/home/jhiver#
>
> Now let's say I want to intercept all UDP/8001 traffic (natted or not)
> and redirect it to another NAT gateway (say 192.168.1.1). And I want all 
> other traffic to simply go through the default route.
>
> Can you do this with FireHOL?

Sure, that should be trivial:

    dnat to 192.168.1.1 proto udp dport 8001

That will rewrite the destination to 192.168.1.1 for anything that
matches the arguments after it.

        Daniel

-- 
Matter is less material and the mind less spiritual than is generally
supposed. The habitual separation of physics and psychology, of mind and
matter is metaphysically indefensible. 
        -- Bertrand Russell