Date: Wed, 10 May 2006 10:03:26 -0400 From: "David S. Madole" <david@madole.net> To: "marcel245@mweb.co.za" <marcel245@mweb.co.za> Cc: freebsd-hackers@freebsd.org Subject: Re: IPFW + NATD Message-ID: <4461F2AE.1010508@madole.net> In-Reply-To: <922141e3b0574a3aaf1eb5e364c4c463@mweb.co.za> References: <922141e3b0574a3aaf1eb5e364c4c463@mweb.co.za>
next in thread | previous in thread | raw e-mail | index | archive | help
marcel245@mweb.co.za wrote: > Now i =ave tried the likes of "ipfw add divert natd all from > 10.150.200.= 35 to 196.25.211.150 via tun0" > And that does not work. Ive tried many examples. And cannot come right That is fine, but you need to make sure the packets for both directions of the connections go through natd. Without seeing your entire set of ipfw rules and configuration, I can't suggest exactly what to do, but remember the outgoing packets will match addresses before NAT (on the inside of natd) and the incoming will match after NAT (on the outside of natd). Assuming that 1.2.3.4 is the address you are NATing to, something similar to this should work: 00001 divert natd ip from 10.150.200.5 to 196.25.211.150 xmit via tun0 00002 divert natd ip from any to 1.2.3.4 recv via tun0 Adjust to suit your own configuration. David
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4461F2AE.1010508>