Date: Wed, 5 Apr 2006 02:09:10 +0400 From: Nikita Staroverov <forth@fss.polarnet.ru> To: freebsd-ipfw@freebsd.org Subject: Re: In-Kernel NAT Message-ID: <200604050209.11233.forth@fss.polarnet.ru> In-Reply-To: <20060404120040.0DE3316A515@hub.freebsd.org> References: <20060404120040.0DE3316A515@hub.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> latest release is available here: > > http://wikitest.freebsd.org/moin.cgi/PaoloPisati > > and adds lsnat, redirect and dynamic address support via if name. > > Right now i stopped working on it due to lack of people > testing it, and there's little point in adding more > and more fatures when the previous chunck of code > was not even tested on SMP and !i386. > Simply, if you want to see it merged in HEAD start using > it and report back any issues you find: once the code has > received greater exposure, finding a brave soul to > import it will be easier IMO. > > bye It's very good news, Paolo. Many users(i talk about russian freebsd users) want to use in-kernel-nat, but simply not know that it almost done and waiting for testers. I'll test it on one of my servers(6.1-prerelease i386 with SMP), and i try to find more testers too. And i have another question: when i do "redirect_port" option with natd in this configuration: natd -s -m -a 213.142.X.X -redirect_port tcp 192.168.0.2:22 22 and with this ipfw rules: divert natd all from any to any allow all from any to any I see that connections redirects to 192.168.0.2, but with source address 192.168.0.1(machine's with natd internal address). What i do wrong? I think that source address must be "real" as when i use ipfilter+ipnat. P.S Sorry for my english, i have not time to learn it better. :confuse:.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200604050209.11233.forth>