Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 Dec 2003 14:05:58 -0800 (PST)
From:      The Bean <beantaxi@yahoo.com>
To:        Micheal Patterson <micheal@tsgincorporated.com>, freebsd <freebsd-questions@freebsd.org>
Subject:   Re: natd.conf problem (was: natd problem (but close!) )
Message-ID:  <20031226220558.13042.qmail@web40402.mail.yahoo.com>
In-Reply-To: <bd0101c3cbf4$ffa02550$0201a8c0@dredster>

next in thread | previous in thread | raw e-mail | index | archive | help
> Um. How many real IP's you have sitting on XL0?
> 
> If it's only one, you don't to redirect_address on it otherwise, it will
> lose internet access itself since all return traffic will go to the internal
> address. If you have multiple IP's on xl0, redirect one of the aliased IP's
> to the internal system. Otherwise, use redirect_port instead.

I have 1 real IP sitting on xl0 on the gateway, and 1 real IP sitting 
on xl0 on the client (they both use xl0, coincidentally). The gateway's 
xl0 is configured for public IP xx.yy.zz.187 -- however, I'm doing 
redirect_address on xx.yy.zz.186, which isn't assigned to any interface. 
I suppose that's why my gateway could still access the Internet even though
I had a redirect_address on.

Hmmmm, I'm starting to feel like I've been misunderstanding how to
use redirect_address . . . could it be that if I want to redirect a
public IP to an interal host on my LAN, I must create an alias for that IP
on the gateway's external interface? That would make sense -- otherwise, the NIC
wouldn't know to use it.

If so, where would I have read this? I'm not saying it's undocced; I'm sure it is,
and so I'm wondering what I misread!

Thanks Micheal -- I look forward to being educated.
- T.B.
> 
> --
> 
> Micheal Patterson
> Network Administration
> TSG Incorporated
> 405-917-0600
> 


__________________________________
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031226220558.13042.qmail>