🚀 go-pugleaf

hi,

I wrote some firewall-rules under FreeBSD 3.5.1 and most of them are quite
working...
Having a little local network (192.xxx.xxx.0), surfing tru my BSD with 2
nic's,
one connected to The Net (rl1), one to the local net (rl0).

LOCALNET ------> rl0 ------> rl1 -------> INTERNET

I'm quite newbie, so it's not very clear to me...
I'm using ipfw and natd, and somehow I got some questions I'd like an answer
for.

first rule in firewall_script:

    ipfw add divert natd all from any to any via rl1

No problem here, I guess.
Just passes all the connections from the inside to the outside (and
backwards), right?

BUT:

    ipfw add allow tcp from any to any 25
    ipfw add allow tcp from any to any 110

Where in fact I would like to specify that only the local network can
send/get mail...
Supposing I could do it this way:

    ipfw add allow tcp from 192.x.x.0/24 to any 25
    ipfw add allow tcp from 192.x.x.0/24 to any 110


BUT that doesn't work... WHY?
Should I add divert/nat - rules?


Tnx,

IsH

----- less important (?) --------
What exactly is the use of the loopbackdevice?
What rules should I add for it?
    ipfw add allow from any to any via lo0

--
* Life is like an Operating System.
* It's nice, but can be hard to cope with.