Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 12 Feb 1999 20:48:25 -0700
From:      nekhbet@rt66.com
To:        questions@FreeBSD.ORG
Cc:        nekhbet@rt66.com
Subject:   static nat and ipfw not seeing translation
Message-ID:  <19990213034825.6033.qmail@rt66.com>

next in thread | raw e-mail | index | archive | help
Hi.  I read David's postings around 1/26 relating to this matter
but I am still having problems.  I have a subnet with (not the
real numbers) 200.0.0.1 on the interface card talking to the net.
200.0.0.3 is the static ip that I want for my other machine whose
internal ip is 192.168.0.3.  My gateway nic has the internal address
of 192.168.0.1.  These are the rules and the natd command I am using:

divert natd ip from 192.168.0.3 to any out via tun0
divert natd ip from any to 200.0.0.3 in from tun0
divert natd ip from any to any via tun0

natd -redirect_address 200.0.0.3 192.168.0.3 -n tun0

tun0 of course being 200.0.0.1.  The problem is that when
I ping 200.0.0.3  the traffic comes up like this:

... 200.0.0.1 > my.isp's.nameserver: "give me name service tranlation"
... my.isp's.nameserver > 200.0.0.1: "here is the ip number"
... 200.0.0.1 > my.isp's.nameserver: icmp: 200.0.0.1 udp port xxxx unreachable
 
It seems like 200.0.0.1 forgets the translation or something.

I change natd to also include -same_ports and I get this

... 200.0.0.1.50535 > my.isp's.nameserver: "give me ... "
... my.isp's.nameserver > 200.0.0.1.50535 "here is the ip number"
... 200.0.0.1 > my.isp's.nameserver: icmp: 200.0.0.1 udp port 1323 unreachable

Any ideas?  Thanks in advance.

-aron warren


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990213034825.6033.qmail>