From owner-freebsd-net Fri Feb 15 19:33:33 2002 Delivered-To: freebsd-net@freebsd.org Received: from laptop.tenebras.com (laptop.tenebras.com [66.92.188.18]) by hub.freebsd.org (Postfix) with SMTP id 62F2437B400 for ; Fri, 15 Feb 2002 19:33:30 -0800 (PST) Received: (qmail 3313 invoked from network); 16 Feb 2002 03:33:29 -0000 Received: from sapphire.tenebras.com (HELO tenebras.com) (66.92.188.241) by 0 with SMTP; 16 Feb 2002 03:33:29 -0000 Message-ID: <3C6DD308.8030009@tenebras.com> Date: Fri, 15 Feb 2002 19:33:28 -0800 From: Michael Sierchio User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:0.9.7) Gecko/20020131 X-Accept-Language: en-us MIME-Version: 1.0 To: "Aaron D. Gifford" Cc: freebsd-net@freebsd.org Subject: Re: Bug in stateful code? References: <20020215225647.DBAB521CE8@ns1.infowest.com> <3C6DA100.3080108@tenebras.com> <20020216014335.AE41B213CA@ns1.infowest.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org see Crist's response for an accurate description of effect on the stateful rules of natd. http://docs.freebsd.org/cgi/getmsg.cgi?fetch=13412+0+current/freebsd-net I revised my ruleset, with a few tricks, to use one IP address for nat and one for the local host's stateful rules. This works, though I had to use a couple of skipto rules (GOTO rules!). To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message