From owner-freebsd-questions  Tue Dec 23 13:58:41 1997
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id NAA13239
          for questions-outgoing; Tue, 23 Dec 1997 13:58:41 -0800 (PST)
          (envelope-from owner-freebsd-questions)
Received: from uustar.starnet.net (uustar.starnet.net [199.217.253.12])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id NAA13210
          for <questions@freebsd.org>; Tue, 23 Dec 1997 13:58:36 -0800 (PST)
          (envelope-from commlet!chrisa@uustar.starnet.net)
Received: from commlet.UUCP (Ucommlet@localhost)
	by uustar.starnet.net (8.8.8/8.8.8) with UUCP id PAA05112
	for freebsd.org!questions; Tue, 23 Dec 1997 15:49:17 -0600 (CST)
From: Chris Aubuchon <chrisa@commlet.com>
X-Mailer: SCO OpenServer Mail Release 5.0
To: questions@freebsd.org
Subject: natd/libalias question
Date: Tue, 23 Dec 97 15:12:58 CST
Message-ID:  <9712231512.aa08867@commlet.commlet.com>
Sender: owner-freebsd-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Greetings,

	Do the packet aliasing functions in libalias only work with private
IP addresses?  10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16.

	I am setting up a firewall for our (as yet undelivered) internet line
and my predecessors decided to make our interior network 126.0.0.0/24.  I plan
on changing this but for testing purposes of natd & ipfw I have left these 
alone.  It appears that libalias is not doing what is says it should.  I have
natd started with -redirect_address 126.0.0.90 38.156.234.7 which according to
the man pages for libalias & natd should allow outgoing requests from 126.0.0.90to appear as 38.156.234.7 and incoming requests for 38.156.234.7 to go to
126.0.0.90.

Here is my network setup:

	126.0.0.90 Internal machine
	38.156.234.5 2.2.5-RELEASE with natd and ipfw running
		     ed1 connected to 126.0.0.0/24
		     ed0 connected to 38.156.234.0/24
	38.156.234.3 2.2.5-RELEASE 

I run natd like so on 38.156.234.5:
	natd -v -redirect_address 126.0.0.90 38.156.234.7 -n ed0

And I ping 38.156.234.3 from 126.0.0.90.  Ping gets packets from 38.156.234.3 
but when I look at the output from natd I see:

Out [ICMP]	126.0.0.90 -> 38.156.234.3 aliased to
		38.156.234.5 -> 38.156.234.3
In  [ICMP]	38.156.234.3 -> 38.156.234.5 aliased to
		38.156.234.3 -> 126.0.0.90

Now according to the manpages, the output above should have .5 replaced with
.7

Any ideas?

Chris Aubuchon
chrisa@commlet.com