From owner-freebsd-net@FreeBSD.ORG Wed Mar 20 02:35:01 2013 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id D8474E73 for ; Wed, 20 Mar 2013 02:35:01 +0000 (UTC) (envelope-from Mark.Martinec+freebsd@ijs.si) Received: from mail.ijs.si (mail.ijs.si [IPv6:2001:1470:ff80::25]) by mx1.freebsd.org (Postfix) with ESMTP id 6326B5E5 for ; Wed, 20 Mar 2013 02:35:01 +0000 (UTC) Received: from amavis-proxy-ori.ijs.si (localhost [IPv6:::1]) by mail.ijs.si (Postfix) with ESMTP id 3ZVwFt1jptzGN2L for ; Wed, 20 Mar 2013 03:34:58 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ijs.si; h= message-id:content-transfer-encoding:content-type:content-type :mime-version:organization:in-reply-to:references:user-agent :date:date:subject:subject:from:from:received:received:received :vbr-info; s=jakla2; t=1363746891; x=1366338892; bh=IIDcAdPjVBpz tRmY4Y3q/3GYt9N7HvzlOKg733UJTCs=; b=S06u5ZqfwNJkym5pi+nCbsM9q6Lc vbjvgRpdnOBimYhPZm9xtQJPXhpWGNJJSLkngBxt15xebYD8Mdywy/RDJY0korvE JZd6bT1454QvpSvBCNxy3iQddgRxm7VZ5eMC2M+GKW9A2UzYrt8j3Abzc+wVHzHw 7xPlC4OLQWR/4Yw= VBR-Info: md=ijs.si; mc=all; mv=dwl.spamhaus.org; X-Virus-Scanned: amavisd-new at ijs.si Received: from mail.ijs.si ([IPv6:::1]) by amavis-proxy-ori.ijs.si (mail.ijs.si [IPv6:::1]) (amavisd-new, port 10012) with ESMTP id 56N23fqplm-e for ; Wed, 20 Mar 2013 03:34:51 +0100 (CET) Received: from mildred.ijs.si (mailbox.ijs.si [IPv6:2001:1470:ff80::143:1]) by mail.ijs.si (Postfix) with ESMTP for ; Wed, 20 Mar 2013 03:34:50 +0100 (CET) Received: from sleepy.ijs.si (sleepy.ijs.si [IPv6:2001:1470:ff80:e001::1:1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mildred.ijs.si (Postfix) with ESMTPSA id DD94AC73 for ; Wed, 20 Mar 2013 03:34:50 +0100 (CET) From: Mark Martinec To: freebsd-net@freebsd.org Subject: Re: Need NAT64 on FreeBSD Date: Wed, 20 Mar 2013 03:34:50 +0100 User-Agent: KMail/1.13.7 (FreeBSD/9.1-STABLE; KDE/4.9.5; amd64; ; ) References: <13648.1363740843.879986722086846464@ffe10.ukr.net> In-Reply-To: <13648.1363740843.879986722086846464@ffe10.ukr.net> Organization: J. Stefan Institute MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <201303200334.50448.Mark.Martinec+freebsd@ijs.si> X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Mar 2013 02:35:01 -0000 On Wednesday March 20 2013 01:54:03 Vladislav Prodan wrote: > Prompt please what or how to implement NAT64 on Freebsd? It is very unfortunate that the PF firewall on FreeBSD is stuck at an old version and doesn't support NAT64, nor does the IPFW support it AFICT. The quickest options that I see is to fire up a VirtualBox under FreeBSD and install a guest OS there that can do the job, like OpenBSD 5.2, or perhaps using an older live-CD by Ecdysis ( http://ecdysis.viagenie.ca/ ), which provides two choices: Linux with Netfilter, or an old OpenBSD with a patched PF. Btw, the DNS64 is not a problem, just use a recent Bind from ports. Similarly the DHCPv6 is not a problem either thanks to ISC dhcp42 from ports. I feel the lack of NAT64 support under FreeBSD a large hurdle against deploying IPv6-only internal networks. Mark