Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 03 Apr 2006 15:12:54 +0200
From:      Ian FREISLICH <if@hetzner.co.za>
To:        Randy Bush <randy@psg.com>
Cc:        FreeBSD Current <freebsd-current@freebsd.org>
Subject:   Re: natd when doubled 
Message-ID:  <E1FQOrW-000KPH-69@hetzner.co.za>
In-Reply-To: Message from Randy Bush <randy@psg.com> of "Mon, 03 Apr 2006 20:10:01 %2B0800." <17457.4249.383686.765032@roam.psg.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
Randy Bush wrote:
> i am in a hotel which gives me an address from 10/8 on the ether.
> i have it plugged into em0 on a -current system.
> 
> i have another machine on wireless out the ath0 port which is
> configured as 192.168.0.1
> 
> my natd.conf is
> 
>     dynamic yes
>     unregistered_only yes
>     interface em0
> 
> my ipfw.rules sez
> 
>     add divert natd all from 192.168.0.0/24 to any via em0
>     add divert natd all from any to 192.168.0.0/24 via ath0
> 
> i suspect the latter two are a bit too clever
> 
> the two machines can ping eachother over the wireless.  but
> nat is just not doing it.
> 
> hit me with he clue bat, please

I thought that all you'd need is:

add divert natd all from any to any via em0

Since natd needs te see all traffic both in and out of the world
facing interface.

Ian

--
Ian Freislich



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E1FQOrW-000KPH-69>