From owner-freebsd-net Mon Mar 18 22:51:47 2002 Delivered-To: freebsd-net@freebsd.org Received: from rwcrmhc53.attbi.com (rwcrmhc53.attbi.com [204.127.198.39]) by hub.freebsd.org (Postfix) with ESMTP id 47BF437B400 for ; Mon, 18 Mar 2002 22:51:44 -0800 (PST) Received: from blossom.cjclark.org ([12.234.91.48]) by rwcrmhc53.attbi.com (InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP id <20020319065143.GUFL2951.rwcrmhc53.attbi.com@blossom.cjclark.org>; Tue, 19 Mar 2002 06:51:43 +0000 Received: (from cjc@localhost) by blossom.cjclark.org (8.11.6/8.11.6) id g2J6pf864938; Mon, 18 Mar 2002 22:51:41 -0800 (PST) (envelope-from cjc) Date: Mon, 18 Mar 2002 22:51:41 -0800 From: "Crist J. Clark" To: Eugene Grosbein Cc: net@FreeBSD.ORG Subject: Re: natd and static nat for different subnets Message-ID: <20020318225141.I60554@blossom.cjclark.org> References: <3C96CCDA.C54342F5@svzserv.kemerovo.su> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3C96CCDA.C54342F5@svzserv.kemerovo.su>; from eugen@svzserv.kemerovo.su on Tue, Mar 19, 2002 at 12:30:02PM +0700 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, Mar 19, 2002 at 12:30:02PM +0700, Eugene Grosbein wrote: > Hi! > > man natd says it's possible to implement static nat with one public address > for the set of private hosts. It's very useful. > > Suppose we have many tens of separated private networks each having its own > public address and own gateway. Is is possible to configure natd to do > static nat for network masks, not only for sets of hosts? I'd like to > say: > > redirect_address 172.20.2.0/24 123.45.56.78 > redirect_address 172.20.2.1 123.45.56.78 > > so incoming traffic for 123.45.56.78 is translated to 172.20.2.1 > and all outgoing traffic from the whole net 172.20.2.0/24 is aliases > to appear from 123.45.56.78? > > It seems natd can't do that now. So how can it be achived without > flooding config of natd with all those IPs from all those networks? You can run multiple natd(8)s and control which block each one translates with their firewall divert(4) rules. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message