ipfw & tomcat on port 80

adilturbo · 09-09-2008, 01:59 AM

hello,

i am running tomcat from jail using port 8080, as non-root user.
i want to access tomcat through port 80 using ipfw forward feature.
i recompiled the kernel using this options:

Quote:

options IPFIREWALL
options IPFIREWALL_FORWARD
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=15

and set a rule in rule file like this :

Quote:

add 1000 fwd 127.0.0.1,8080 tcp from any to 80 in

when listing the rules (ipfw list) i get this:

Quote:

00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
01000 fwd 127.0.0.1,8080 tcp from any to any dst-port 80 in
65535 deny ip from any to any

when i try to access tomcat through port 80, it doesn't work?

am i missing something?

thanks in advance for the help.

Adil

anomie · 09-09-2008, 12:45 PM

I've worked with IPFW for a couple years, but I haven't used it for forwarding / NAT at all. If you haven't already, read through 28.6 IPFW and the manpages for ipfw(8).

Frankly, for tcp forwarding I prefer to use rinetd (which you can install from ports) because of its simplicity. But I'm probably in the minority there.

chort · 09-09-2008, 06:44 PM

You could just use PF, which is already built-in by default SFAIK. The syntax is dead simple and it gives you a single place to configure port redirection, NAT, and packet filtering.

adilturbo · 09-11-2008, 09:50 AM

hi there,

thank you so much for the help, i used rinetd, it works.
rinetd is so easy and simple.
i let ipfw as filter.

thanks again