From owner-freebsd-questions Mon Feb 15 15:52:04 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA25121 for freebsd-questions-outgoing; Mon, 15 Feb 1999 15:52:04 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from awfulhak.org (awfulhak.force9.co.uk [195.166.136.63]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA25080 for ; Mon, 15 Feb 1999 15:51:50 -0800 (PST) (envelope-from brian@Awfulhak.org) Received: from keep.lan.Awfulhak.org (keep.lan.Awfulhak.org [172.16.0.8]) by awfulhak.org (8.8.8/8.8.8) with ESMTP id XAA18698; Mon, 15 Feb 1999 23:49:15 GMT (envelope-from brian@Awfulhak.org) Received: from keep.lan.Awfulhak.org (localhost [127.0.0.1]) by keep.lan.Awfulhak.org (8.9.3/8.9.3) with ESMTP id RAA38912; Mon, 15 Feb 1999 17:58:16 GMT (envelope-from brian@keep.lan.Awfulhak.org) Message-Id: <199902151758.RAA38912@keep.lan.Awfulhak.org> X-Mailer: exmh version 2.0.2 2/24/98 To: nekhbet@rt66.com cc: Brian Somers , questions@FreeBSD.ORG Subject: Re: static nat and ipfw not seeing translation In-reply-to: Your message of "Mon, 15 Feb 1999 09:31:56 MST." <19990215163156.25212.qmail@rt66.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 15 Feb 1999 17:58:16 +0000 From: Brian Somers Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Maybe the -unregistered_only switch is in order ? > Brian- > When i take out the first two diverts I get normal natd translation. > It still sends my traffic to 200.0.0.3 out tun0 and never gets seen > again. Now that I think about it is that the problem? > > Anyways this setup seemed to work for David, > see DejaNews for "static nat ipfw". > > thanks > aron > > > Hi. I read David's postings around 1/26 relating to this matter > > > but I am still having problems. I have a subnet with (not the > > > real numbers) 200.0.0.1 on the interface card talking to the net. > > > 200.0.0.3 is the static ip that I want for my other machine whose > > > internal ip is 192.168.0.3. My gateway nic has the internal address > > > of 192.168.0.1. These are the rules and the natd command I am using: > > > > > > divert natd ip from 192.168.0.3 to any out via tun0 > > > divert natd ip from any to 200.0.0.3 in from tun0 > > > divert natd ip from any to any via tun0 > > > > > > natd -redirect_address 200.0.0.3 192.168.0.3 -n tun0 > > [.....] > > > Any ideas? Thanks in advance. > > > > I would have thought the above divert rules would confuse natd - > > newer versions of the FreeBSD kernel will take the re-injected packet > > and feed it to the next ipfw rule - making natd process your packets > > twice. > > > > What happens if you remove the first two divert lines ? > > > > > -aron warren -- Brian Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message