From owner-freebsd-net Tue Mar 19 1:18:26 2002 Delivered-To: freebsd-net@freebsd.org Received: from rwcrmhc51.attbi.com (rwcrmhc51.attbi.com [204.127.198.38]) by hub.freebsd.org (Postfix) with ESMTP id 8F3ED37B404 for ; Tue, 19 Mar 2002 01:18:23 -0800 (PST) Received: from blossom.cjclark.org ([12.234.91.48]) by rwcrmhc51.attbi.com (InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP id <20020319091823.PQMV2626.rwcrmhc51.attbi.com@blossom.cjclark.org>; Tue, 19 Mar 2002 09:18:23 +0000 Received: (from cjc@localhost) by blossom.cjclark.org (8.11.6/8.11.6) id g2J9IMw65882; Tue, 19 Mar 2002 01:18:22 -0800 (PST) (envelope-from cjc) Date: Tue, 19 Mar 2002 01:18:22 -0800 From: "Crist J. Clark" To: Eugene Grosbein Cc: net@FreeBSD.org Subject: Re: natd and static nat for different subnets Message-ID: <20020319011822.K60554@blossom.cjclark.org> References: <3C96CCDA.C54342F5@svzserv.kemerovo.su> <20020318225141.I60554@blossom.cjclark.org> <3C96E940.95335672@svzserv.kemerovo.su> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3C96E940.95335672@svzserv.kemerovo.su>; from eugen@svzserv.kemerovo.su on Tue, Mar 19, 2002 at 02:31:12PM +0700 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, Mar 19, 2002 at 02:31:12PM +0700, Eugene Grosbein wrote: > "Crist J. Clark" wrote: > > > > Suppose we have many tens of separated private networks each having its own > > > public address and own gateway. Is is possible to configure natd to do > > > static nat for network masks, not only for sets of hosts? I'd like to > > > say: > > > > > > redirect_address 172.20.2.0/24 123.45.56.78 > > > redirect_address 172.20.2.1 123.45.56.78 > > > > > > so incoming traffic for 123.45.56.78 is translated to 172.20.2.1 > > > and all outgoing traffic from the whole net 172.20.2.0/24 is aliases > > > to appear from 123.45.56.78? > > > > > > It seems natd can't do that now. So how can it be achived without > > > flooding config of natd with all those IPs from all those networks? > > > > You can run multiple natd(8)s and control which block each one > > translates with their firewall divert(4) rules. > > I think running tens copies of natd is not wise. natd(8)'s memory footprint isn't too big. As long as you have the RAM for it, I don't think running multiple natd(8)'s would be too bad. But I've never run more than two. > Would it be hard to implement this? Probably not too bad. Apparently no stampede for this functionality though. There usually is not a lot to gain by mapping different internal networks to different external addresses except maybe some warm fuzzies. > Is it issue of natd itself or of libalias? I think it's more of a libalias(3) issue. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message