Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 14 Jan 1997 08:57:42 +1100 (EDT)
From:      Darren Reed <avalon@coombs.anu.edu.au>
To:        chris@mail.bb.cc.wa.us (Chris Coleman)
Cc:        tinguely@plains.nodak.edu, brian@awfulhak.demon.co.uk, hackers@freebsd.org
Subject:   Re: IPFILTER
Message-ID:  <199701132158.NAA08910@freefall.freebsd.org>
In-Reply-To: <Pine.BSF.3.91.970113103942.478B-100000@mail.bb.cc.wa.us> from "Chris Coleman" at Jan 13, 97 11:02:04 am

next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Chris Coleman, sie said:
> 
> Ok, i have a machine on 10.16.14.10
> 
> in the FBSD box i have two network cards.
> 		fxp0 inet 208.8.136.10
> 		fxp1 inet 10.16.14.1
> 
> i have ipfilter loaded in the kernel.
> 
> im using /etc/natrules
> 
> 	map fxp1 10.16.14.0/24 208.8.136.13/24 portmap tcp/udp 1025:65000
> 	map fxp1 10.16.14.0/24 208.8.136.13/24

Try fpx0 instead of fpx1.  When configuring IP Filter for NAT, you always
specify the interface on which the packets exit (or are meant to exit)
the box - i.e. the interface with the real Internet address.

Darren



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199701132158.NAA08910>