Date: Sat, 21 Oct 2006 17:14:06 -0500 From: "Matthew D. Fuller" <fullermd@over-yonder.net> To: Brett Glass <brett@lariat.net> Cc: piso@freebsd.org, net@freebsd.org Subject: Re: Avoiding natd overhead Message-ID: <20061021221406.GP75501@over-yonder.net> In-Reply-To: <200610212154.PAA11668@lariat.net> References: <200610210648.AAA01737@lariat.net> <20061021095808.GH75501@over-yonder.net> <200610212154.PAA11668@lariat.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Oct 21, 2006 at 03:54:06PM -0600 I heard the voice of Brett Glass, and lo! it spake thus: > > Also, more than once I've locked myself out of a machine when trying > to restart NAT with a different configuration; The trick I've adopted for this is to have allow rules for port 22 both directions BEFORE the divert rule for natd. That way even if it's down, I can still talk ssh. -- Matthew Fuller (MF4839) | fullermd@over-yonder.net Systems/Network Administrator | http://www.over-yonder.net/~fullermd/ On the Internet, nobody can hear you scream.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061021221406.GP75501>