Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Mar 2005 10:17:19 +0100
From:      John Angelmo <john@veidit.net>
To:        "Nickolay A. Kritsky" <nkritsky@star-sw.com>
Cc:        freebsd-net@freebsd.org
Subject:   Re: NAT problem with public network
Message-ID:  <4230109F.60808@veidit.net>
In-Reply-To: <671282193578.20041216144526@star-sw.com>
References:  <41C15E0B.2050503@veidit.net> <671282193578.20041216144526@star-sw.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Nickolay A. Kritsky wrote:
> Hello John,
> 
> You can use two ways:
> 1. Add 'unregistered_only yes' to your natd.conf
> 2. Run natd on xl2 with -reverse option
> 
> If I were you I would do the first one.
> 

I tried that with this rule on top
ipfw add divert natd log all from any to any via xl0

Well that handles all the packages and just then kicks out the packets 
not to 192.168.20.0/24 to the rest of the IPFW rules, should I do 
something like this instead:
ipfw add divert natd log all from 192.168.20.0/24 to any via xl0 keep-state

I simply want to only nat the right rules and let the rest of the 
packages be handled by ipfw

/John



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4230109F.60808>