From owner-freebsd-security  Mon Jun 18 11:41:25 2001
Delivered-To: freebsd-security@freebsd.org
Received: from veldy.net (w028.z064001117.msp-mn.dsl.cnc.net [64.1.117.28])
	by hub.freebsd.org (Postfix) with ESMTP id 0E09137B403
	for <freebsd-security@FreeBSD.ORG>; Mon, 18 Jun 2001 11:41:19 -0700 (PDT)
	(envelope-from veldy@veldy.net)
Received: from HP2500B (localhost.veldy.net [127.0.0.1])
	by veldy.net (Postfix) with SMTP
	id 7D7DCBA56; Mon, 18 Jun 2001 13:41:16 -0500 (CDT)
Message-ID: <001301c0f826$37aec460$3028680a@tgt.com>
From: "Thomas T. Veldhouse" <veldy@veldy.net>
To: "Chris Kesler" <chris@pconline.com>,
	<freebsd-security@FreeBSD.ORG>
References: <Pine.LNX.3.95.1010618132448.5151M-100000@newton.pconline.com>
Subject: Re: ipnat.conf oddity
Date: Mon, 18 Jun 2001 13:40:56 -0500
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

I believe it is intended to be that way.  It takes the address of the
interface you specified.

Tom Veldhouse
veldy@veldy.net

----- Original Message -----
From: "Chris Kesler" <chris@pconline.com>
To: <freebsd-security@FreeBSD.ORG>
Sent: Monday, June 18, 2001 1:34 PM
Subject: ipnat.conf oddity


> This is my current ipnat.conf file.
>
> map vx0 192.168.1.0/24 -> 0/32 portmap tcp/udp 1025:65000
> map vx0 192.168.1.0/24 -> 0/32
>
> Notice that the address to the right of the -> is 0.  I discovered by
> accident that this configuration works on my system.  I'm using ipnat and
> ipf on 4.3-RELEASE.
>
> I couldn't find any docs describing why this config works.  I have a cable
> modem connection, and the DHCP-assigned IP address changes once in a
> while. I wonder if this is a feature intended to allow me to continue to
> forward packets after my address changes.  Or is it a bad idea to run the
> box this way?
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message