Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Nov 2000 14:30:37 -0800
From:      Justin Wojdacki <justin@chiplogic.com>
To:        "Zaitsau, Andrei" <AZaitsau@panasonicfa.com>
Cc:        "'freebsd-questions@freebsd.org'" <freebsd-questions@freebsd.org>
Subject:   Re: NAT question
Message-ID:  <3A1AF78D.930B0F65@chiplogic.com>
References:  <054F7DAA9E54D311AD090008C74CE9BD01F1E6D3@exchange.panasonicfa.com>

next in thread | previous in thread | raw e-mail | index | archive | help
"Zaitsau, Andrei" wrote:
> 
> I am using NAT on a gateway connected to the internet. 2 Computers are
> connected to the gateway(192.168.0.1) with addresses 192.168.0.2 and
> 192.168.0.3, is it possible manually block NAT(disconnect from internet)
>  for computer with 192.168.0.3 , while second host 192.168.0.2 will be still
> alive(connected to the internet)?
> Is it possible to limit bandwidth for users connected to gateway?
> Thanks
> 

Re: Question #1
try a NAT rule like this (if you're using ipf/ipnat):

map ppp0 192.168.0.3/32 -> 192.168.0.1/32 portmap tcp/udp 10000:20000

with no rule that similarly handles 192.168.0.2.

This should tell ipnat to map on to ppp0 at 192.168.0.1 any TCP or UDP
connection from 192.168.0.3 that's on ports 10000 through 20000. Well, I
think. I'd have to play with it some to be sure. 

-- 
---------------------
Justin Wojdacki
justin@chiplogic.com
Chiplogic Inc.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A1AF78D.930B0F65>