Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 5 Dec 1999 13:50:51 -0500 (EST)
From:      danh@wzrd.com (Dan Harnett)
To:        aLan@fil.net (aLan Tait)
Cc:        freebsd-isp@freebsd.org
Subject:   Re: IPFilter and xntpd
Message-ID:  <19991205185051.ACD495D064@mail.wzrd.com>
In-Reply-To: <384A8AF9.3287B947@fil.net> from aLan Tait at "Dec 5, 1999 11:55:37 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
> Can this be?  Am I missing something that would allow the
> return packets to return to "123.45.102.1" instead of
> "192.168.1.2"???
> 

What you need to do here is enable IPNAT.  This will translate the internal
addresses to the 123.45.102.1 address.  Some simple rules to allow most of the
basic services are:

map xl0 192.168.0.0/16 -> 123.45.102.1/32 proxy port ftp ftp/tcp
map xl0 192.168.0.0/16 -> 123.45.102.1/32 portmap tcp/udp 10000:60000
map xl0 192.168.0.0/16 -> 123.45.102.1/32


Dan Harnett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991205185051.ACD495D064>