From nobody Sun Jul 13 07:17:02 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bfxbj2rydz61pKR for ; Sun, 13 Jul 2025 07:17:21 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from mx-01.divo.sbone.de (mx-01.divo.sbone.de [IPv6:2003:a:140a:2200:6:594:fffe:19]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (prime256v1) client-digest SHA256) (Client CN "mx-01.divo.sbone.de", Issuer "E5" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bfxbh64Vrz3Cm8 for ; Sun, 13 Jul 2025 07:17:20 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Authentication-Results: mx1.freebsd.org; none Received: from mail.sbone.de (mail.sbone.de [IPv6:fde9:577b:c1a9:4902:0:7404:2:1025]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx-01.divo.sbone.de (Postfix) with ESMTPS id ED03DA64806; Sun, 13 Jul 2025 07:17:03 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=zabbadoz.net; s=20240622; t=1752391024; bh=Q90g4+/sVRzFZvqnKQo9/mvwaNYvUaiIjmuihjb9oJc=; h=Date:From:To:cc:Subject:In-Reply-To:References; b=PXF9nsTA9/5BK9ALIgmdtqb96alz6O25cQm646YIlxASTXkBQRVg7Ri9di7osTda5 pO+FZYPSUBS/l2YW1SwzENMBl2nqmKYdeiTSNHKp8ZOQ4gKFT+Q27l+XJLxWbdwLfB HYQpQcKpxB/B62LoBxdQDOI2sh2JpLx1q3EN8gsLCxBND7RYOpQFIJWsMrDqR6IsOE 0aaP7VN6gpNynUuWFJhbUfkmC+PpG2rrOpSuatB7a6ch19O0EqU2+8WZ+48r6IZjlf +dpn73/o6+UeSbRWZsxaq4d60poj1vBMr6zqW89mCvYZbUyNFAxt0t5vovs5IuPDl8 ZjbA0/eVPtGu1RDlQtEb3t8winkEJ+oZju+7pUkHxawkkCdb029+t5bxE8BBEw7oN0 kBT08rXIOxZGHYYFK5I+2w1LvtWN6pzo04xL7rU4rmMxk7Km5K/Iu5n5TwX/6SgtwL kscToFlr9qF6Z9tSOMMYtnPiYThOb3zLJdMtAAPZsMn2tgPIJQJdhvJowgRGmmm7/j +B88g7I9Z3UFzVTP7cGX56tMih8rjBYbTZfF4/3BAWIL1Z0F11jSpsuwMdNxbNTSwu 2eYm+argSuTLoPK71+b9EmY0u1dculkRsuS1Rm6VV4lHHtGto6yPDjhuEQXhouAen9 bcUpfDSBn8zzzK4xTRJd9aMQ= Received: from content-filter.t4-02.sbone.de (content-filter.t4-02.sbone.de [IPv6:fde9:577b:c1a9:4902:0:7404:2:2742]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail.sbone.de (Postfix) with ESMTPS id 84CAA2D029E1; Sun, 13 Jul 2025 07:17:07 +0000 (UTC) X-Virus-Scanned: amavisd-new at sbone.de Received: from mail.sbone.de ([IPv6:fde9:577b:c1a9:4902:0:7404:2:1025]) by content-filter.t4-02.sbone.de (content-filter.t4-02.sbone.de [IPv6:fde9:577b:c1a9:4902:0:7404:2:2742]) (amavisd-new, port 10024) with ESMTP id zPHXQUIISN5J; Sun, 13 Jul 2025 07:17:06 +0000 (UTC) Received: from strong-iwl0.sbone.de (strong-iwl0.sbone.de [IPv6:fde9:577b:c1a9:4902:a66b:b6ff:fe40:39a9]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail.sbone.de (Postfix) with ESMTPSA id 586E52D029D8; Sun, 13 Jul 2025 07:17:06 +0000 (UTC) Date: Sun, 13 Jul 2025 07:17:02 +0000 (UTC) From: "Bjoern A. Zeeb" To: Ben Hutton cc: freebsd-net@freebsd.org Subject: Re: WLAN and Bridge In-Reply-To: Message-ID: <2os57n4q-0451-9413-8s66-s8n17n470s1n@yvfgf.mnoonqbm.arg> References: <35d2f6fe-c401-4031-a13c-267192d75833@benhutton.com.au> <289r0n75-38sn-12p7-p330-82n56qs5602n@yvfgf.mnoonqbm.arg> X-OpenPGP-Key-Id: 0x14003F198FEFA3E77207EE8D2B58B8F83CCF1842 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Rspamd-Queue-Id: 4bfxbh64Vrz3Cm8 X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:3320, ipnet:2003::/19, country:DE] On Sun, 13 Jul 2025, Ben Hutton wrote: > How would I do the L2 or L3 NAT with bhyve? L3 (IP level) NAT is a normal NAT with ipfw/pf/ipf NAT as one would normally do. Depends on you preference of which firewall solution to use. You need to set it up on your host system NATting on the WiFi interface. /bz -- Bjoern A. Zeeb r15:7