Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 Sep 2004 16:26:21 +0300
From:      Juhani Tali <juhani@kernel.ee>
To:        freebsd-net@freebsd.org
Subject:   Nat problem, nat and proxy_address at the same time. 
Message-ID:  <415814FD.8010109@kernel.ee>

next in thread | raw e-mail | index | archive | help
Hi

I am trying to use in Linux terminology "SNAT" and "DNAT" at the same time.

The result should be: client 192.168.1.9 sees instead of remote web 
server 96.98 a remote (routed) web server 240.17

natd -port 8675 -alias_address 212.27.241.3 -proxy_rule port 80 server 
212.27.240.17:80
ipfw add 125 divert 8675 ip from 192.168.1.9 to 194.106.96.98
ipfw add 126 divert 8675 ip from 212.27.240.17 to any

In the gw, tcpdump shows me
on the external interface traffic both ways, to and from 240.17 (the 
"new" web server)
on the internal interface traffic only outgoing traffic towards 96.98

ipfw show
00125      102        5064 divert 8675 ip from 192.168.1.9 to 194.106.96.98
00126       36        2096 divert 8675 ip from 212.27.240.17 to any
So it seems that these (testing only) rules do get traffic and the 
problem is in nat.

What might be the problem?

Juhani



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?415814FD.8010109>