From owner-freebsd-security Tue Aug 29 14: 5:18 2000 Delivered-To: freebsd-security@freebsd.org Received: from news.IAEhv.nl (news.IAE.nl [194.151.64.4]) by hub.freebsd.org (Postfix) with ESMTP id EC27137B424 for ; Tue, 29 Aug 2000 14:05:15 -0700 (PDT) Received: (from uucp@localhost) by news.IAEhv.nl (8.9.1/8.9.1) with IAEhv.nl id XAA14378; Tue, 29 Aug 2000 23:05:10 +0200 (MET DST) Received: from avalon.oasis.IAEhv.nl (avalon.oasis.IAEhv.nl [192.168.1.3]) by drawbridge.oasis.IAEhv.nl (Postfix) with ESMTP id 6EECA3E39; Tue, 29 Aug 2000 23:02:37 +0200 (CEST) Received: by avalon.oasis.IAEhv.nl (Postfix, from userid 226) id 7D9223D; Tue, 29 Aug 2000 23:02:15 +0200 (CEST) Subject: Re: ipnat and icmp (II) In-Reply-To: "from Buliwyf McGraw at Aug 28, 2000 12:23:09 pm" To: Buliwyf McGraw Date: Tue, 29 Aug 2000 23:02:15 +0200 (CEST) Cc: freebsd-security@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL82 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII Message-Id: <20000829210215.7D9223D@avalon.oasis.IAEhv.nl> From: volf@oasis.IAEhv.nl (Frank Volf) Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Buliwyf McGraw wrote: > > map ed0 192.168.0.0/16 -> 240.1.0.0/24 portmap icmp 10000:20000 > > Obviusly, it doesnt work :/ > > Im looking for instructions about it, but in the examples i saw, always > talk about NAT for tcp/udp, never icmp. It is possible? > > Thanks for any help. Not yet, but I'm working on it. From my test machine: map xl1 192.168.1.0/255.255.255.0 -> w.x.y.z/255.255.255.255 icmpidmap icmp 60000:61000 We are first working on some FreeBSD and IP-Filter specific problems, before we can get this included in IP-Filter. Frank To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message