Date: Tue, 14 Jun 2011 13:35:24 +0000 (UTC) From: "Andrey V. Elsukov" <ae@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sbin/ipfw ipfw.8 ipfw2.c ipfw2.h nat.c src/sys/netinet/ipfw ip_fw2.c ip_fw_nat.c src/sys/netinet/libalias alias.h Message-ID: <201106141335.p5EDZvPF085105@repoman.freebsd.org>
index | next in thread | raw e-mail
ae 2011-06-14 13:35:24 UTC
FreeBSD src repository
Modified files:
sbin/ipfw ipfw.8 ipfw2.c ipfw2.h nat.c
sys/netinet/ipfw ip_fw2.c ip_fw_nat.c
sys/netinet/libalias alias.h
Log:
SVN rev 223080 on 2011-06-14 13:35:24Z by ae
Implement "global" mode for ipfw nat. It is similar to natd(8)
"globalport" option for multiple NAT instances.
If ipfw rule contains "global" keyword instead of nat_number, then
for each outgoing packet ipfw_nat looks up translation state in all
configured nat instances. If an entry is found, packet aliased
according to that entry, otherwise packet is passed unchanged.
User can specify "skip_global" option in NAT configuration to exclude
an instance from the lookup in global mode.
PR: kern/157867
Submitted by: Alexander V. Chernikov (previous version)
Tested by: Eugene Grosbein
Revision Changes Path
1.247 +22 -1 src/sbin/ipfw/ipfw.8
1.164 +13 -5 src/sbin/ipfw/ipfw2.c
1.16 +1 -0 src/sbin/ipfw/ipfw2.h
1.9 +9 -1 src/sbin/ipfw/nat.c
1.58 +7 -0 src/sys/netinet/ipfw/ip_fw2.c
1.20 +41 -8 src/sys/netinet/ipfw/ip_fw_nat.c
1.37 +6 -0 src/sys/netinet/libalias/alias.h
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201106141335.p5EDZvPF085105>