alias ip and natd with ipfw fwd

G Bryant bsd at roamingsolutions.net
Sat Oct 1 03:13:42 PDT 2005


   # ifconfig -a
   rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
       options=8<VLAN_MTU>
       inet 192.168.8.70 netmask 0xffffff00 broadcast 192.168.8.255
       inet 192.168.0.99 netmask 0xffffff00 broadcast 192.168.0.255
       ether 00:11:95:5a:e2:da
       media: Ethernet autoselect (100baseTX <full-duplex>)
       status: active
   rl1: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500
       options=8<VLAN_MTU>
       ether 00:11:95:5a:e2:dc
       media: Ethernet autoselect (10baseT/UTP)
       status: no carrier
   vr0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu
   1500
       inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
       ether 00:11:09:08:11:c4
       media: Ethernet autoselect (none)
       status: no carrier
   plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST> mtu 1500
   lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
       inet 127.0.0.1 netmask 0xff000000
   # ipfw show
   00100   0     0 allow ip from any to any via lo0
   00200   0     0 allow ip from 192.168.1.0/24 to any in
   00300   0     0 allow ip from any to 192.168.1.0/24 out
   00400 184 16728 allow ip from 192.168.0.0/16 to me in
   00500 173 14810 allow ip from me to 192.168.0.0/16 out
   08000   0     0 divert 8672 ip from any to 192.168.0.0/24 out
   08100   0     0 allow ip from me to 192.168.0.0/24 out
   08200   0     0 divert 8671 ip from any to 192.168.8.0/24 out
   08300   0     0 allow ip from me to 192.168.8.0/24 out
   09000   0     0 divert 8672 ip from any to 196.4.160.7 out
   09100   0     0 check-state
   09200   0     0 fwd 192.168.0.1 log logamount 10 ip from 192.168.0.99
   to any out keep-state
   09300   9   629 divert 8671 ip from any to any out
   09400   9   629 allow ip from me to any out via rl0
   09500   0     0 allow ip from any to any out
   09600   0     0 divert 8672 ip from any to 192.168.0.99 in via rl0
   09700   7  1123 divert 8671 ip from any to 192.168.8.70 in via rl0
   09800  42  4241 allow ip from any to any in via rl0
   09900   0     0 allow ip from any to any in via rl0
   09999   0     0 deny log logamount 10 ip from any to any
   65535   0     0 deny ip from any to any
   ##  was testing the divert by pinging 196.4.160.7
   # natd1.conf
   alias_address 192.168.8.70
   pid_file /var/run/natd1.pid
   port natd1
   # natd2.conf
   alias_address 192.168.0.99
   pid_file /var/run/natd2.pid
   port natd2
   "."@babolo.ru wrote:

Can anybody please help with problem.
Using natd and ipfw and trying to fwd packets to a non-default router 
out the same interface.
Currently using alias for the second ip, but it doesn't seem to be 
working for some some reason I'm missing. Would clone maybe work?
Any advice would be appreciated.
    

ipfw rules, ifconfig -a and natd options need
to be demonstrated.
_______________________________________________
[1]freebsd-net at freebsd.org mailing list
[2]http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to [3]"freebsd-net-unsubscribe at freebsd.org"

References

   1. mailto:freebsd-net at freebsd.org
   2. http://lists.freebsd.org/mailman/listinfo/freebsd-net
   3. mailto:freebsd-net-unsubscribe at freebsd.org


More information about the freebsd-net mailing list