From owner-freebsd-hackers Mon Oct 13 19:00:45 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id TAA11942 for hackers-outgoing; Mon, 13 Oct 1997 19:00:45 -0700 (PDT) (envelope-from owner-freebsd-hackers) Received: from awfulhak.demon.co.uk (awfulhak.demon.co.uk [158.152.17.1]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id TAA11935 for ; Mon, 13 Oct 1997 19:00:35 -0700 (PDT) (envelope-from brian@awfulhak.org) Received: from gate.lan.awfulhak.org (localhost [127.0.0.1]) by awfulhak.demon.co.uk (8.8.5/8.8.5) with ESMTP id VAA24345; Mon, 13 Oct 1997 21:24:56 +0100 (BST) Message-Id: <199710132024.VAA24345@awfulhak.demon.co.uk> X-Mailer: exmh version 2.0zeta 7/24/97 To: Thomas David Rivers cc: freebsd-hackers@freefall.FreeBSD.org Subject: Re: two natd's running? In-reply-to: Your message of "Mon, 13 Oct 1997 11:23:57 EDT." <199710131523.LAA01999@lakes.dignus.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 13 Oct 1997 21:24:56 +0100 From: Brian Somers Sender: owner-freebsd-hackers@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk > > This is a rather old question I'm just now getting around to... > > What I have is a situation where I'd like to two SL/IP connections > going with multiple natd's running. > > Several people had suggested simply having two divert rules in > rc.firewall and running the two natd's that way. > > Here's what I've got the gateway (a 2.2-970510-RELENG machine) at > 10.0.0.1: > > ipfw -f flush > ipfw -f add 10 divert 32001 ip from any to 192.42.243.0/24 via sl1 You can't masquerade in just one direction.... add ipfw -f add 10 divert 32001 ip from 192.42.243.0/24 to any via sl1 > ipfw -f add 20 divert 32000 ip from any to any via sl0 > ipfw -f add pass ip from any to any [.....] > - Thanks - > - Dave Rivers - > -- Brian , , Don't _EVER_ lose your sense of humour....