IPF, NAT or NIC

Steve Bertrand steve at ibctech.ca
Fri Sep 18 14:18:23 UTC 2009


Steve Bertrand wrote:

> map fxp0 192.168.0.0/24 -> 0/32
> 
> Aside from that, are you sure that this entry shouldn't be:
> 
> map rl0 192.168.0.0/24 -> 0/32
> 
> ? Again, I don't know ipnat, but to me, in the fxp0 entry, it looks like
> you are trying to map the 192 space coming INTO fxp0 (which in your
> original post is the NIC that faces the ISP, not the internal network).
> If this is how ipnat looks at this, then this is also a problem.

Just a note, section "30.5.16 IPNAT Rules" of the handbook states that
using the external interface in the map rule is the correct way of doing
things.

Steve
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3233 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20090918/b0f1917f/smime.bin


More information about the freebsd-questions mailing list