Re: Reverse IP NAT to secondary IP address

From: Nils Vogels (nivo+sender+8eb026_at_yuckfou.org)
Date: 10/26/03

  • Next message: paul van den bergen: "configuring routing for ipv6 - simple case." 
    Date: Sun, 26 Oct 2003 14:01:49 +0100

    "."@babolo.ru wrote:

    >>Since I have the internet on the same interface, but on the primary IP
    >>instead, would enabling ARP PROXY not fill the ARP table with every host
    >>on the internet, that tries to contact the gateway ?
    >>
    >>
    >Are you using default route?
    >If yes, only default router's MAC used for every external IP.
    >
    >
    >
    OK, great.

    >>>No NAT is needed.
    >>>
    >>>
    >>>
    >>I just tried this, but unfortunately, the same thing happens as with
    >>ipfilter:
    >>
    >>The primary address of the interface ed0 on the gateway (the public
    >>adress) is used to forward the arp request.
    >>
    >>Taken from a dump on the gateay, when attempting telnet:
    >>
    >>Incoming on rl0:
    >>03:35:05.867883 192.168.0.2.1511 > 192.168.2.2.23: S
    >>1377718084:1377718084(0) win 57344 <mss 1460> (DF) [tos 0x10]
    >>
    >>Outgoing on ed0:
    >>03:35:05.868333 195.0.0.1.15009 > 192.168.2.2.23: S
    >>1377718084:1377718084(0) win 57344 <mss 1460> (DF) [tos 0x10]
    >>
    >>
    >No NAT is needed.
    >Just allow 192.168.0.2 <-> 192.168.2.2 flow directly,
    >not via NAT
    >
    >
    I just changed my ipnat rule to:

    map ed0 from 192.168.0.0/24 ! to 192.168.0.0/16 -> 0/32
    map ed0 from 192.168.0.0/24 ! to 192.168.0.0/16 -> 0/32 portmap tcp/udp
    15000:19999

    And this is now working. Thanks a bunch! ;-)
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: paul van den bergen: "configuring routing for ipv6 - simple case."

    Relevant Pages

    • Re: Wake on lan mit OS X
      ... > Rechner nicht mehr schlafen legen kann, sobald ich port 9 per NAT ... NAT routing bei dem die auf port 9 reinkommenden Pakete als broadcast ... eines fehlenden ARP Eintrages umgehen.. ... Router ließ sich aber ein solches Routing nicht erfogreich einstellen. ...
      (de.comp.sys.mac.internet)
    • Re: firewall-1 NG NAt/local.arp/arp question
      ... NG can do automatic ARP configuration unlike 4.1. ... 1 pc each on a different subnet and one as the ... > to get NAT working but im not sure I have done it correctly. ... > automatic static NAT with an address of 192.168.253.126. ...
      (comp.security.firewalls)
    • Re: Cisco 837 - how to set up Inside to Inside NAT for DNS resolution?
      ... ip nat outside ... ip nat inside source list 102 interface Dialer1 overload ... I noticed your comment about the DNS and the router. ... I dont get this ARP entry and the router does /not/ ...
      (comp.dcom.sys.cisco)
    • Re: Routing problem
      ... You're able to arp 192.168.64.1 and 192.168.64.3, ... assume you're running nat on this machine to translate internal machine ... at this point is that when the public address is up, the nat is preventing ... No I can't ping them. ...
      (freebsd-questions)
    • Re: ARP Problem
      ... The server is setup as a gateway computer. ... I am having an intermittent problem with the first external card. ... looses connection to the internet, ... warning that it can't clear the arp cache, so I ran arp -a and noticed ...
      (microsoft.public.windows.server.sbs)