From owner-freebsd-current@FreeBSD.ORG  Tue Jul  1 14:33:50 2003
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 497AA37B401
	for <current@freebsd.org>; Tue,  1 Jul 2003 14:33:50 -0700 (PDT)
Received: from mandarin.fruitsalad.org (pc117.net160.koping.net
	[81.16.160.117])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 82C9343FFD
	for <current@freebsd.org>; Tue,  1 Jul 2003 14:33:48 -0700 (PDT)
	(envelope-from matt@hasta.se)
Received: from [192.168.15.54] (helo=klementin)
	by mandarin.fruitsalad.org with smtp (Exim 4.14)
	id 19XSl1-0003nT-52
	for current@freebsd.org; Tue, 01 Jul 2003 23:33:47 +0200
From: "Matt Douhan" <matt@hasta.se>
To: <current@freebsd.org>
Date: Tue, 1 Jul 2003 23:34:11 +0200
Message-ID: <IIEBLFJCECCIAJIHMKNPEEDECBAA.matt@hasta.se>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Subject: ipf and ipnat
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Jul 2003 21:33:50 -0000

Hello

I am running ipf and ipnat on CURRENT as of today 4 PM CEST (july 1 2003)
and I have enabled the following in my kernel
options IPFILTER
options IPFILTER_LOG
options IPSTEALTH
options RANDOM_IP_ID

in /etc/rc.conf I have enabled ipf and ipnat according to the handbook

when I put this box on the network, all outbound NAT works fine, i,e the MAP
statements in /etc/ipnat.rules however the BIMAP statements does not work, a
host identified in the BIMAP statement cannot pass through the fw, outbound
and cannot be reached inbound from the internet.

if I do ipnat -l I can see the MAP and BIMAP statements in the table

and ipf is not blocking the packets according to the logs

running the exact same config on a STABLE box works fine

Have I missed something obvious?

Matt Douhan
www.fruitsalad.org