Date: Fri, 23 Jul 2010 15:41:13 -0400 From: alexus <alexus@gmail.com> To: Erik Norgaard <norgaard@locolomo.org> Cc: freebsd-questions@freebsd.org Subject: Re: ipnat.conf - map and rdr won't work! Message-ID: <AANLkTimOTNN247XZ9f%2BpUrxJH2FGeBCbgNq0st73q_wv@mail.gmail.com> In-Reply-To: <4C49E2CD.7020607@locolomo.org> References: <AANLkTilVTo36Fzdh2DKAQhRjyDj8MNUuV9dhwvQ7Gf-V@mail.gmail.com> <AANLkTinh0CykJ1Av3f2THPDFOLS0YtYLDvRMHXm_wD3w@mail.gmail.com> <4C3F91CF.5090206@locolomo.org> <AANLkTin6hYyHiG8taifkNHPBtKI0rKOkAaGRYodV1LLC@mail.gmail.com> <4C419944.8030702@locolomo.org> <AANLkTin8H47Z7suztGnWpa8fm-XIagQ6vzlxP85OIT-B@mail.gmail.com> <4C447F7F.6020308@locolomo.org> <AANLkTinM1E2Obrs8VqSsm3S_jcXqbw_Q1YLkc51tgJsS@mail.gmail.com> <4C45D57F.2020506@locolomo.org> <AANLkTinXjSXlL59mVU5bh-cIqxwHg5C3pgOsA7tcqFMk@mail.gmail.com> <4C45F0F1.7010609@locolomo.org> <AANLkTimFKATt4_4umseRhcrDl7BLkOuNvOfuXIGHrdJB@mail.gmail.com> <AANLkTi=ZmiRB=43xQEpJjZpeDBCRwf61W_-Sbbm8oaZt@mail.gmail.com> <4C49E2CD.7020607@locolomo.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jul 23, 2010 at 2:43 PM, Erik Norgaard <norgaard@locolomo.org> wrote: > On 23/07/10 18.58, alexus wrote: > >> i just did jail on public ip where i dont need to use ipnat, so >> obviously that works fine no problem >> not really what i wanted though but as a temporary fix its fine... > > With all respect, I think you should start liking this solution, because for > all I understand, this is the right solution. > > If external access to the jail was otherwise through rdr, there is really no > benefit at all, securitywise or otherwise. But allowing the jail to bind > directly on the ip that external clients connect to you get simplicity and > ease of configuration. > > BR, Erik > true, i agree and i do like this solution better, but that solution wont allow me to expand let me explain what i mean by that let's take for example i'm running more then one jail... while i can bind all of them to same public IP address i'm going have to deal with running for example same sshd on different ports, yet before i'd just use rdr rule to route it appropriately. i guess its not really a big deal but still while we found very nice work around i still somehow would like to know what happened, why ipnat stop working all the sudden.. i'd like to say thank you to you and anyone else who was involved in this discussion -- http://alexus.org/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTimOTNN247XZ9f%2BpUrxJH2FGeBCbgNq0st73q_wv>