RFC 6296 (NPT v6)

[Bjoern A. Zeeb]

On Jul 10, 2011, at 3:13 AM, Rémy Sanchez wrote:

> I was wondering if they were anyone currently implementing NPTv6 for FreeBSD ?
> 
> If nobody is, since I need this feature and that the RFC is quite simple, I 
> think I'll implement it (or run out of time trying to). However, it looks like 
> you can't divert IPv6, and then I don't know what would be the best option to 
> implement it: using netgraph might be a "cleaner" way to do it, however 
> hacking directly into ipfw might be more direct.
> 
> What do you think ?

pf allows you do do prefix rewriting with binat at least, like:

binat on $extif inet6 from $my_v6_ula_48 to !<my_v6_internal_networks> -> $my_v6_external_48


-- 
Bjoern A. Zeeb                                 You have to have visions!
         Stop bit received. Insert coin for new address family.