Date: Sat, 24 Aug 2002 13:12:07 -0700 From: "Crist J. Clark" <crist.clark@attbi.com> To: Sean Hamilton <sh@planetquake.com> Cc: hackers@FreeBSD.ORG Subject: Re: Weird NAT setup Message-ID: <20020824201207.GB94424@blossom.cjclark.org> In-Reply-To: <001401c24b18$ee8e59c0$911de8d8@slugabed.org> References: <001401c24b18$ee8e59c0$911de8d8@slugabed.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Aug 23, 2002 at 07:49:56PM -0700, Sean Hamilton wrote:
[snip]
> My understanding of how NAT works is far from complete, so I don't exactly
> see why this isn't working. Is there a solution/fix, or at least a reason?
IPFilter NAT and bridging in FreeBSD will not necessarily work well
together. Basically, IPFilter doesn't know much of anything about the
bridge. In your configuration, I wouldn't expect it to even know fxp1
exists. I'm surprised this works as well for you as it does.
If you want something a little more robust, I would recommend either
using ipfw(8) and natd(8), which have a bit more low-level control
over this kind of thing, or if you want to stick with IPFilter,
OpenBSD has more mature bridging-IPFilter support, although the
IPFilter support in OpenBSD has degraded somewhat since it was dropped
from the base.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020824201207.GB94424>