Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 Jun 2001 13:40:56 -0500
From:      "Thomas T. Veldhouse" <veldy@veldy.net>
To:        "Chris Kesler" <chris@pconline.com>, <freebsd-security@FreeBSD.ORG>
Subject:   Re: ipnat.conf oddity
Message-ID:  <001301c0f826$37aec460$3028680a@tgt.com>
References:  <Pine.LNX.3.95.1010618132448.5151M-100000@newton.pconline.com>

next in thread | previous in thread | raw e-mail | index | archive | help
I believe it is intended to be that way.  It takes the address of the
interface you specified.

Tom Veldhouse
veldy@veldy.net

----- Original Message -----
From: "Chris Kesler" <chris@pconline.com>
To: <freebsd-security@FreeBSD.ORG>
Sent: Monday, June 18, 2001 1:34 PM
Subject: ipnat.conf oddity


> This is my current ipnat.conf file.
>
> map vx0 192.168.1.0/24 -> 0/32 portmap tcp/udp 1025:65000
> map vx0 192.168.1.0/24 -> 0/32
>
> Notice that the address to the right of the -> is 0.  I discovered by
> accident that this configuration works on my system.  I'm using ipnat and
> ipf on 4.3-RELEASE.
>
> I couldn't find any docs describing why this config works.  I have a cable
> modem connection, and the DHCP-assigned IP address changes once in a
> while. I wonder if this is a feature intended to allow me to continue to
> forward packets after my address changes.  Or is it a bad idea to run the
> box this way?
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001301c0f826$37aec460$3028680a>