Dirty NAT tricks

Tiago Cruz tiagocruz at forumgdh.net
Thu Feb 23 06:19:58 PST 2006


On Wed, 2006-02-22 at 16:07 +0100, Dimitry Andric wrote:

> Read pf.conf(5), especially the parts about binat.  This is probably
> what you want.

Ok, thank you... I'm reading about but think that I some of some
example... reading the FAQ of OpenVPN I saw this one:

=======================================================================================
Does anybody know how to remap local addresses, if I want to connect two
networks with an overlap in the private address range?
Using iptables 1.2.7a+ and the NETMAP target:

        iptables -t nat -A PREROUTING -d 192.168.0.0/24 -j NETMAP --to 192.168.1.0/24
or
        iptables -t nat -A POSTROUTING -d 192.168.1.0/24 -j NETMAP --to 192.168.0.0/24
=======================================================================================

Maybe is some like this?
binat on $vpn_if from any to 192.168.0.1 -> 192.168.1.0

But... I have this error: pfctl: Syntax error in config file: pf rules
not loaded

Well... I'm a little bit of lost... is someone have some tip...

Thanks!

-- 
Tiago Cruz
http://linuxrapido.org




More information about the freebsd-pf mailing list