Date: Tue, 9 May 2000 15:50:03 -0700 (PDT) From: Brian Somers <brian@Awfulhak.org> To: freebsd-bugs@FreeBSD.org Subject: Re: bin/18354: NATD diverts DMZ packets to firewall host Message-ID: <200005092250.PAA49042@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR bin/18354; it has been noted by GNATS.
From: Brian Somers <brian@Awfulhak.org>
To: goran.lowkrantz@infologigruppen.se
Cc: freebsd-gnats-submit@FreeBSD.org,
Brian Somers <brian@awfulhak.org>, Ruslan Ermilov <ru@FreeBSD.org>,
Charles Mott <cmott@scientech.com>, Eivind Eklund <perhaps@yes.no>,
Ari Suutari <ari@suutari.iki.fi>
Subject: Re: bin/18354: NATD diverts DMZ packets to firewall host
Date: Tue, 09 May 2000 23:41:01 +0100
> >Number: 18354
> >Category: bin
> >Synopsis: NATD diverts DMZ packets to firewall host
This is happening because I changed the libalias(3) default so that
it drops packets from outside to inside on the gateway by default
rather than passing them into the (private) internal network. This
behaviour can be altered using PacketAliasSetTarget(). IMHO this is
what people expect and is what the documentation indicated was the
intention.
When I sent a patch to Ruslan (cc'd) adding a -t option to natd, he
pointed out that natd's documentation clearly doesn't expect this to
happen.
We decided to ask about the original intentions and decide what to do
based on the outcome, but haven't received a reply from Charles (cc'd
as a gentle poke) yet.
So, this is in limbo. At the moment, there's no way to get the old
behaviour (maybe we should add the -t switch in the interim - Ruslan,
have you still got that patch? Or if you don't want to do that,
perhaps we should just do a PacketAliasSetTarget(INADDR_ANY) in
natd.c for now).
--
Brian <brian@Awfulhak.org> <brian@[uk.]FreeBSD.org>
<http://www.Awfulhak.org>; <brian@[uk.]OpenBSD.org>
Don't _EVER_ lose your sense of humour !
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200005092250.PAA49042>