Date: Mon, 10 Sep 2007 07:00:16 GMT From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: freebsd-bugs@FreeBSD.org Subject: Re: misc/116238: natd/ipfw not maintaining interface of udp packets (maybe tcp too?) Message-ID: <200709100700.l8A70Grg099638@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR misc/116238; it has been noted by GNATS.
From: "Andrey V. Elsukov" <bu7cher@yandex.ru>
To: Joe Acosta <josepha48@yahoo.com>
Cc: freebsd-gnats-submit@FreeBSD.org
Subject: Re: misc/116238: natd/ipfw not maintaining interface of udp packets
(maybe tcp too?)
Date: Mon, 10 Sep 2007 10:53:53 +0400
Joe Acosta wrote:
>> Description:
> natd is natting everything and messing up certain outgoing packets.
No. natd is natting only packets wich it gets from the divert socket.
You should make *correct* "ipfw divert" rules.
>> How-To-Repeat:
> install dhcp, on a dual nic box.
> setup a firewall and nat on ext nic using ipfw/natd
> try to get dhcp ip address on internal lan
Why you pass DHCP packets into divert socket? Don't do it.
--
WBR, Andrey V. Elsukov
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200709100700.l8A70Grg099638>