Date: Mon, 6 Jan 2003 16:07:20 +0300 From: Serg Repalov <ReSerg@Mail.Ru> To: freebsd-questions@FreeBSD.ORG Subject: question about /etc/rc.firewall Message-ID: <1737194525.20030106160720@Mail.Ru>>
next in thread | raw e-mail | index | archive | help
Hi.
Can anyone make clear for me one thing. In file /etc/rc.firewall
we have two sections which stops RFC1918 and draft-manning-dsua-03.txt
networks:
# Stop RFC1918 nets on the outside interface
[ ... ]
# Network Address Translation. This rule is placed here deliberately
[ ... ]
case ${natd_enable} in
[Yy][Ee][Ss])
if [ -n "${natd_interface}" ]; then
${fwcmd} add divert natd all from any to any via ${natd_interface}
fi
;;
esac
# Stop RFC1918 nets on the outside interface
[ ... ]
If we don't using NAT then we have _two_ sections of _same_ rules,
where the second sections is unnecessary. May be better code is:
# Stop RFC1918 nets on the outside interface
[ ... ]
# Network Address Translation. This rule is placed here deliberately
[ ... ]
case ${natd_enable} in
[Yy][Ee][Ss])
if [ -n "${natd_interface}" ]; then
${fwcmd} add divert natd all from any to any via ${natd_interface}
# Stop RFC1918 nets on the outside interface
[ ... ]
fi
;;
esac
Where the second section which stops RFC1918 and draft-manning-dsua-03.txt
networks is applied only if we really using NAT ?
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1737194525.20030106160720>