Reverse IP NAT to secondary IP address
Nils Vogels
nivo+sender+8eb026 at yuckfou.org
Sat Oct 25 20:06:33 PDT 2003
"."@babolo.ru wrote:
>configure port with SNMP-server as 192.168.0.17/30 for example
>instead 192.168.2.1/24, and
>sysctl net.link.ether.inet.proxyall=1
>
>and configure SNMP-server as 192.168.0.18/24
>
>If you can change mask of SNMP-server, you can
>use 192.168.0/24 and 192.168.1/24 on gateway
>and 192.168.0/25 on SNMP-server.
>
>No NAT is needed.
>
>
I just tried this, but unfortunately, the same thing happens as with
ipfilter:
The primary address of the interface ed0 on the gateway (the public
adress) is used to forward the arp request.
Taken from a dump on the gateay, when attempting telnet:
Incoming on rl0:
03:35:05.867883 192.168.0.2.1511 > 192.168.2.2.23: S
1377718084:1377718084(0) win 57344 <mss 1460> (DF) [tos 0x10]
Outgoing on ed0:
03:35:05.868333 195.0.0.1.15009 > 192.168.2.2.23: S
1377718084:1377718084(0) win 57344 <mss 1460> (DF) [tos 0x10]
Since 195.0.0.1 (obviously obfuscated) does not fall within the subnet
the 192.168.2.2 box is on, there will never be a reply from the
192.168.2.2 box.
ARP proxying goes fine, on the WWW box, I can see the proxied reply
coming from my gateway for the 192.168.1.1 address .....
Can anyone tell me, how I can make the box use the secondary address
(alias) automatically for forwarding the telnet session?
Could it be that since the gateway is running many-to-one NAT as well,
this is conflicting ?
Greetings,
Nils.
More information about the freebsd-net
mailing list