Date: Tue, 19 Mar 2002 01:18:22 -0800 From: "Crist J. Clark" <cjc@FreeBSD.org> To: Eugene Grosbein <eugen@svzserv.kemerovo.su> Cc: net@FreeBSD.org Subject: Re: natd and static nat for different subnets Message-ID: <20020319011822.K60554@blossom.cjclark.org> In-Reply-To: <3C96E940.95335672@svzserv.kemerovo.su>; from eugen@svzserv.kemerovo.su on Tue, Mar 19, 2002 at 02:31:12PM %2B0700 References: <3C96CCDA.C54342F5@svzserv.kemerovo.su> <20020318225141.I60554@blossom.cjclark.org> <3C96E940.95335672@svzserv.kemerovo.su>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Mar 19, 2002 at 02:31:12PM +0700, Eugene Grosbein wrote:
> "Crist J. Clark" wrote:
>
> > > Suppose we have many tens of separated private networks each having its own
> > > public address and own gateway. Is is possible to configure natd to do
> > > static nat for network masks, not only for sets of hosts? I'd like to
> > > say:
> > >
> > > redirect_address 172.20.2.0/24 123.45.56.78
> > > redirect_address 172.20.2.1 123.45.56.78
> > >
> > > so incoming traffic for 123.45.56.78 is translated to 172.20.2.1
> > > and all outgoing traffic from the whole net 172.20.2.0/24 is aliases
> > > to appear from 123.45.56.78?
> > >
> > > It seems natd can't do that now. So how can it be achived without
> > > flooding config of natd with all those IPs from all those networks?
> >
> > You can run multiple natd(8)s and control which block each one
> > translates with their firewall divert(4) rules.
>
> I think running tens copies of natd is not wise.
natd(8)'s memory footprint isn't too big. As long as you have the RAM
for it, I don't think running multiple natd(8)'s would be too bad. But
I've never run more than two.
> Would it be hard to implement this?
Probably not too bad. Apparently no stampede for this functionality
though. There usually is not a lot to gain by mapping different
internal networks to different external addresses except maybe some
warm fuzzies.
> Is it issue of natd itself or of libalias?
I think it's more of a libalias(3) issue.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020319011822.K60554>