From owner-freebsd-net@FreeBSD.ORG Thu Dec 16 11:45:29 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9295916A4CE for ; Thu, 16 Dec 2004 11:45:29 +0000 (GMT) Received: from mail.star-sw.com (mail.star-sw.com [217.195.82.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id BDA9743D5C for ; Thu, 16 Dec 2004 11:45:28 +0000 (GMT) (envelope-from nkritsky@star-sw.com) Received: from ARGON.star-sw.com (argon.star-sw.com [217.195.82.10]) by mail.star-sw.com (8.12.11/8.12.11) with ESMTP id iBGBjRoT017178; Thu, 16 Dec 2004 14:45:27 +0300 (MSK) Received: from ibmka.star-sw.com ([192.168.32.230]) by ARGON.star-sw.com with Microsoft SMTPSVC(5.0.2195.5329); Thu, 16 Dec 2004 14:45:26 +0300 Date: Thu, 16 Dec 2004 14:45:26 +0300 From: "Nickolay A. Kritsky" X-Mailer: The Bat! (v1.49) Personal X-Priority: 3 (Normal) Message-ID: <671282193578.20041216144526@star-sw.com> To: John Angelmo In-reply-To: <41C15E0B.2050503@veidit.net> References: <41C15E0B.2050503@veidit.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 16 Dec 2004 11:45:26.0916 (UTC) FILETIME=[BC555440:01C4E364] cc: freebsd-net@freebsd.org Subject: Re: NAT problem with public network X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: "Nickolay A. Kritsky" List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Dec 2004 11:45:29 -0000 Hello John, You can use two ways: 1. Add 'unregistered_only yes' to your natd.conf 2. Run natd on xl2 with -reverse option If I were you I would do the first one. Thursday, December 16, 2004, 1:06:03 PM, John Angelmo wrote: JA> Hello JA> I have a network setup like this: JA> xl0: External:213.115.251.220 JA> xl1: DMZ: 213.115.148.64/28 JA> xl2: Internal: 192.168.20.0/24 JA> Now my problem seems to be that I need to get external connection for my JA> Internal network but not nating the DMZ JA> To simplify it all /etc/natd.conf has this line: JA> interface xl0 JA> and to get nat to work I just use: JA> ipfw add divert natd log all from any to any via xl0 JA> but that would nat all the traffic, how should I do just to use nat for JA> my 192.168.20.0/24 network and not the 213.115.148.64/28 network? JA> /John JA> _______________________________________________ JA> freebsd-net@freebsd.org mailing list JA> http://lists.freebsd.org/mailman/listinfo/freebsd-net JA> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" -- Best regards, ; Nickolay A. Kritsky ; SysAdmin STAR Software LLC ; mailto:nkritsky@star-sw.com