Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 Dec 2001 14:53:19 +0200
From:      veedee@c7.campus.utcluj.ro
To:        "Crist J . Clark" <cjc@FreeBSD.ORG>
Cc:        freebsd-net@FreeBSD.ORG
Subject:   Re: ipnat
Message-ID:  <20011205145319.A11038@c7.campus.utcluj.ro>
In-Reply-To: <20011205034016.G40864@blossom.cjclark.org>; from cjc@FreeBSD.ORG on Wed, Dec 05, 2001 at 03:40:16AM -0800
References:  <20011204210510.A1833@c7.campus.utcluj.ro> <20011205034016.G40864@blossom.cjclark.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 05, 2001 at 03:40:16AM -0800, Crist J . Clark wrote:
> [This would be better on the -questions list or IPFilter list.]
Sorry to be a pain in the ass, but is there a freebsd-ipfilter? haven't
found any at
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/eresources.html

Or you meant another ipfilter list? :-/

> On Tue, Dec 04, 2001 at 09:05:10PM +0200, veedee@c7.campus.utcluj.ro wrote:
> [snip]
> 
> > -- ipnat.rules --
> > map xl0 172.27.0.0/23 -> x.x.x.x/32 proxy port ftp ftp/tcp
> > map xl0 from 172.27.0.0/23 to any -> x.x.x.x/32
> > -- eof --
> 
> Try,
> 
>   map xl0 172.27.0.0/23 -> x.x.x.x/32 proxy port ftp ftp/tcp
>   map xl0 172.27.0.0/23 -> x.x.x.x/32 portmap tcp/udp auto 
>   map xl0 172.27.0.0/23 -> x.x.x.x/32
>
Doesn't work... Arjaan sugested 0/0 which solved my problem. Anyway, I was
wondering who is in charge of ipfilter for freebsd. I grep-ed the man pages,
but there was no reference what so ever to 0/0.
Here's the new rule list, for those who had/have/will have this problem:
-- ipnat.rules --
# Don't NAT for 172.27.40.0
map xl0 from 172.27.0.0/23 to 172.27.40.0/23 -> 0/0 proxy port ftp ftp/tcp
map xl0 from 172.27.0.0/23 to 172.27.40.0/23 -> 0/0
# NAT everything else
map xl0 from 172.27.0.0/23 to any -> x.x.x.x/32 proxy port ftp ftp/tcp
map xl0 from 172.27.0.0/23 to any -> x.x.x.x/32
-- eof --

Thank you for your time,
veedee.

> -- 
> Crist J. Clark                     |     cjclark@alum.mit.edu
>                                    |     cjclark@jhu.edu
> http://people.freebsd.org/~cjc/    |     cjc@freebsd.org
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011205145319.A11038>