From owner-freebsd-net Tue Mar 19 22:27: 0 2002 Delivered-To: freebsd-net@freebsd.org Received: from www.svzserv.kemerovo.su (www.svzserv.kemerovo.su [213.184.65.80]) by hub.freebsd.org (Postfix) with ESMTP id D297A37B405 for ; Tue, 19 Mar 2002 22:26:53 -0800 (PST) Received: from svzserv.kemerovo.su (kost [213.184.65.82]) by www.svzserv.kemerovo.su (8.11.6/8.11.6) with ESMTP id g2K6Ql566656; Wed, 20 Mar 2002 13:26:47 +0700 (KRAT) (envelope-from eugen@svzserv.kemerovo.su) Message-ID: <3C982B9A.7A8455A1@svzserv.kemerovo.su> Date: Wed, 20 Mar 2002 13:26:34 +0700 From: Eugene Grosbein Organization: SVZServ X-Mailer: Mozilla 4.79 [en] (Win95; U) X-Accept-Language: ru,en MIME-Version: 1.0 To: cjclark@alum.mit.edu Cc: net@FreeBSD.org Subject: Re: natd and static nat for different subnets References: <3C96CCDA.C54342F5@svzserv.kemerovo.su> <20020318225141.I60554@blossom.cjclark.org> <3C96E940.95335672@svzserv.kemerovo.su> <20020319011822.K60554@blossom.cjclark.org> <3C97043B.449715B2@svzserv.kemerovo.su> <20020319015259.M60554@blossom.cjclark.org> <3C9821BA.F44DE2E0@svzserv.kemerovo.su> <20020319221020.G67739@blossom.cjclark.org> Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org "Crist J. Clark" wrote: > > On Wed, Mar 20, 2002 at 12:44:26PM +0700, Eugene Grosbein wrote: > > > I forgot point out that ipnat(8) will do this as-is if that is an > > > option for you. > > > > Hmm, I've read man ipnat and still not sure how can I achieve > > a combination of redirection ip<->ip and map net<->ip. > > Why not? > > map if0 192.168.100.0/24 -> 192.0.2.10/32 portmap tcp/udp auto > map if0 192.168.100.0/24 -> 192.0.2.10/32 > bimap if0 192.168.100.1/32 -> 192.0.2.10/32 > map if0 172.16.0.0/16 -> 192.0.2.12/32 portmap tcp/udp auto > map if0 172.16.0.0/16 -> 192.0.2.12/32 > bimap if0 172.16.0.1/32 -> 192.0.2.12/32 > > All of the outgoing from the 192.168.100.0/24 block gets translated to > 192.0.2.10. All of the incoming to 192.0.2.10 not associated with an > existing connection gets passed to 192.168.100.1. The same thing goes > for the 172.16.0.0/16 block except it gets translated to > 192.0.2.12. Isn't that what you wanted? Yes, thank you. One more: now I run a kernel built with IPFIREWALL and IPDIVERT, the system is 3.5-STABLE yet. Can I just add IPFILTER and not touch my configuration (e.g. do not setup ipf and ipnat rules)? Can I switch from natd to ipnat on-the-fly then? Eugene To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message