ipfw / ppp NAT

Hexren me at hexren.net
Sun Feb 6 05:01:56 PST 2005


CK> Ok wait,

CK> let me explain a bit more, because it seems the source-address is not my 
CK> problem.


y.y ->> x.x -> x.1

CK> y.y is a IP from the Internet
CK> x.x is the FreeBSD gateway, and
CK> x.1 is a client on a internal network

CK> I run NAT (via ipfw / ppp) on x.x.  The packet comes in from y.y, via x.x, 
CK> to x.1, HOWEVER, the source-address of the packet ariving at x.1 is still 
CK> y.y.  I want the source address of the packet ariving at x.1 to be x.x, and 
CK> not y.y

CK> --
CK> Chris.



CK> ----- Original Message ----- 
CK> From: "Chris Knipe" <savage at savage.za.org>
CK> To: <freebsd-questions at freebsd.org>
CK> Sent: Sunday, February 06, 2005 2:37 PM
CK> Subject: ipfw / ppp NAT


>> Hi,
>>
>> Is there any way that I can get / configure ipfw / Kernel PPP to rewrite 
>> the source address via NAT?
>>
>> --
>> Chris.
>> _______________________________________________
>> freebsd-questions at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to 
>> "freebsd-questions-unsubscribe at freebsd.org"
>> 

CK> _______________________________________________
CK> freebsd-questions at freebsd.org mailing list
CK> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
CK> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"

---------------------------------------------

given that tun0 is the interface that connects x.x to the world (y.y)
then what you have now would be:
"ipfw add divert natd all from any to any via tun0"

from what I understand what you want you should probably add somethin
like:
"ipfw add divert natd all from any to any via rl0"
rl0 being the interface connecting x.x to x.1

on related news, why would u want to do something like that ?

Hexren



More information about the freebsd-questions mailing list