From owner-freebsd-net@FreeBSD.ORG  Thu Dec 16 10:07:40 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4D72416A4CE
	for <freebsd-net@freebsd.org>; Thu, 16 Dec 2004 10:07:40 +0000 (GMT)
Received: from mxfep01.bredband.com (mxfep01.bredband.com [195.54.107.70])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2321043D5A
	for <freebsd-net@freebsd.org>; Thu, 16 Dec 2004 10:07:39 +0000 (GMT)
	(envelope-from john@veidit.net)
Received: from [192.168.20.33] ([213.113.142.243] [213.113.142.243])
          by mxfep01.bredband.com with ESMTP
          id <20041216100737.WBUH18879.mxfep01.bredband.com@[192.168.20.33]>
          for <freebsd-net@freebsd.org>; Thu, 16 Dec 2004 11:07:37 +0100
Message-ID: <41C15E0B.2050503@veidit.net>
Date: Thu, 16 Dec 2004 11:06:03 +0100
From: John Angelmo <john@veidit.net>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8a4) Gecko/20041110
X-Accept-Language: sv, en-gb, en, en-us
MIME-Version: 1.0
To: freebsd-net@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: NAT problem with public network
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Dec 2004 10:07:40 -0000

Hello

I have a network setup like this:

xl0: External:213.115.251.220
xl1: DMZ: 213.115.148.64/28
xl2: Internal: 192.168.20.0/24

Now my problem seems to be that I need to get external connection for my 
Internal network but not nating the DMZ

To simplify it all /etc/natd.conf has this line:
interface xl0

and to get nat to work I just use:
ipfw add divert natd log all from any to any via xl0

but that would nat all the traffic, how should I do just to use nat for 
my 192.168.20.0/24 network and not the 213.115.148.64/28 network?

/John