From owner-freebsd-net@FreeBSD.ORG Wed Jun 18 16:14:56 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 14F13106567A for ; Wed, 18 Jun 2008 16:14:56 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from gaia.nimnet.asn.au (nimbin.lnk.telstra.net [139.130.45.143]) by mx1.freebsd.org (Postfix) with ESMTP id 9D61A8FC21 for ; Wed, 18 Jun 2008 16:14:54 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from localhost (smithi@localhost) by gaia.nimnet.asn.au (8.8.8/8.8.8R1.5) with SMTP id CAA18663; Thu, 19 Jun 2008 02:14:46 +1000 (EST) (envelope-from smithi@nimnet.asn.au) Date: Thu, 19 Jun 2008 02:14:45 +1000 (EST) From: Ian Smith To: Matt Brennan In-Reply-To: <1c01b5070806130659ufaa761ax18de48287c7064d1@mail.gmail.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: FreeBSD Networking Subject: Re: Static NAT and PAT on 6.2 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jun 2008 16:14:56 -0000 On Fri, 13 Jun 2008, Matt Brennan wrote: > Hi All, > > I am running FreeBSD 6.2-release. I have been running PAT via natd > and ipfw for some time now and it runs great. However, I continue to > try and employ static NAT on this router, and as soon as I do so all > other clients lose routing. My natd.conf is as below: > > unregistered_only > use_sockets > log_ipfw_denied > redirect_address 10.100.1.2 66.92.79.20 > alias_address 66.92.79.89 > > Whenever I run with this configuration all clients except the > static'ed one lose routing out of the building. I have tried switching > the order of the alias_address and redirect_address. Maybe folks need more information on your network topology; ifconfig, netstat -rn, say .. tcpdumps on the interface losing traffic? I haven't used redirect_address, but perhaps you need to specify target_address to disambiguate requests to other than alias_address? Stab in the dark, since it was my bright idea to refer you to -net :) cheers, Ian