[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: NAT working oneway
From:       David Keegel <djk () cyber ! com ! au>
Date:       1997-07-03 4:43:17
[Download RAW message or body]

] Aaron 'Shadow' Jackson wrote:
] > Here are the samples I have used.
] > 
] >   [1]  map le0 206.222.182.146/32 -> 192.168.104.58/32     [ ipf.nat ]
] >        pass out on le0 206.222.182.146/32 port = <portno>  [ ipf.conf
] > ]
] >   [2]  map le0 206.222.182.145/29 -> 192.168.104.57/29     [ ipf.nat ]
] >        pass out on le0 206.222.182.145/29 port = <portno>  [ ipf.conf
] > ]
] >   [3]  map le1 192.168.104.57/29 -> 206.222.182.145/29     [ ipf.nat ]
] >   [4]  map le1 192.168.104.58/32 -> 206.222.182.146/32     [ ipf.nat ]
 
] Hmmm, had I read the source code with more clarity I would have
] understood why 3 and 4 do not work.  However, 2 eludes me and I suspect
] its due to a netmask calculation error which Carson seems to have
] pointed out earlier.

You may like to read
http://www.cyber.com.au/cyber/product/ipfilter/mail_list/1997-06/msg00022.html
(an earlier message from the ipfilter mailing list) which includes a patch.
__________________________________________________________________________
David Keegel <djk@cyber.com.au>  http://www.cyber.com.au/  +61 3 9642-5997
Cybersource P/L: Unix Systems Administration and TCP/IP network management

[prev in list] [next in list] [prev in thread] [next in thread]