Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 30 Jun 2013 22:32:56 +0700
From:      Eugene Grosbein <eugen@grosbein.net>
To:        Sami Halabi <sodynet1@gmail.com>
Cc:        "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>, "Paul A. Procacci" <pprocacci@datapipe.com>, freebsd-ipfw <freebsd-ipfw@freebsd.org>
Subject:   Re: DNAT in freebsd
Message-ID:  <51D04FA8.8080900@grosbein.net>
In-Reply-To: <CAEW%2Bogbx15KiayBHFJ7T1YVGQ2pwm1ArQaSrjUk6XUOBgVPggA@mail.gmail.com>
References:  <CAEW%2BogYp61U2zjicksYekSdfmLLZh5g9QM3GUg4n16ZbudVZtg@mail.gmail.com> <20130629002959.GB20376@nat.myhome> <CAEW%2BogZ=a6LZavOtcb_egNWFQ8bJP0gzP6pc90tu1dcWC9K80A@mail.gmail.com> <51D006F6.6060809@grosbein.net> <CAEW%2Bogbx15KiayBHFJ7T1YVGQ2pwm1ArQaSrjUk6XUOBgVPggA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 30.06.2013 18:48, Sami Halabi wrote:
> Hi,
> I don't understand how reverse mode works exactly, and didn't find a good example.
> 
> 
> can you try and help on the configuration?

Well, that's pretty simple. Generally, NAT translates source IP address of the packet
keeping destination IP intact. You need both of source and
destination addresses get translated. Reverse NAT translates does,
well, reverse thing: it translates destination IP keeping source IP intact.
So, you just need setup two ipfw nat instances, one "general" and one "reverse"
and pass your packets through both instances.

Eugene Grosbein





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?51D04FA8.8080900>