From owner-freebsd-hackers  Sun Jan 12 15:38:04 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id PAA01486
          for hackers-outgoing; Sun, 12 Jan 1997 15:38:04 -0800 (PST)
Received: from awfulhak.demon.co.uk (awfulhak.demon.co.uk [158.152.17.1])
          by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id PAA01473
          for <hackers@freebsd.org>; Sun, 12 Jan 1997 15:37:34 -0800 (PST)
Received: from awfulhak.demon.co.uk (localhost.coverform.lan [127.0.0.1]) by awfulhak.demon.co.uk (8.8.4/8.7.3) with ESMTP id XAA08535; Sun, 12 Jan 1997 23:04:02 GMT
Message-Id: <199701122304.XAA08535@awfulhak.demon.co.uk>
X-Mailer: exmh version 1.6.9 8/22/96
To: Chris Coleman <chris@mail.bb.cc.wa.us>
cc: hackers@freebsd.org
Subject: Re: IPFILTER 
In-reply-to: Your message of "Sat, 11 Jan 1997 16:19:46 GMT."
             <Pine.BSF.3.91.970111161622.788A-100000@mail.bb.cc.wa.us> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Sun, 12 Jan 1997 23:04:02 +0000
From: Brian Somers <brian@awfulhak.demon.co.uk>
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> Im setting up ipfilter to work on my system and I have it installed. 
> But i need help configuring the rules so that it will actually work.
> 
> 
> I have two cards in the FBSD box.  fxp0 and vx0
> fpx0 is 208.8.136.10
> vx0 is 10.16.14.1
> 
> i have a client on 10.16.14.100 and i want it to be translated to
> a 208.8.136.10 address so that it can go out.
> 
> how do i do this?
> 
> thanks
> 
> chris coleman

You need something like

    map tun0 10.16.14.0/24 -> 208.8.136.10

in /etc/natrules (say), then run 'ipnat /etc/natrules' or something like 
that... I got this stuff working, but ftp DATA commands never worked and it 
crashed the machine a few times.  Socks, cached and ppp -alias are all far 
superior !

-- 
Brian <brian@awfulhak.demon.co.uk>, <brian@freebsd.org>
      <http://www.awfulhak.demon.co.uk/>
Don't _EVER_ lose your sense of humour....