multi-instance natd problem

From: Bjoern A. Zeeb (bzeeb-lists_at_lists.zabbadoz.net)
Date: 07/29/04

  • Next message: Gleb Smirnoff: "any ng_device users?" 
    Date: Thu, 29 Jul 2004 09:02:56 +0000 (UTC)
To: Poul-Henning Kamp <phk@phk.freebsd.dk>

    Hi,

    I started using the multi instance natd feature and running into
    problems.

    Every morning when the IP on the dialup interface with the default
    route (tun0) changes I need to re-start the natd. Else I am getting:
            natd[88668]: failed to write packet back (Permission denied)

    looks like natd deosn't get the IP change and still aliases packets to
    the old IP and the packets then get rejected by ipfw rules ?

    I would see this on the other interfaces too I think but though they
    are online they are idle and only used to see that the login is able
    to get in and for sporadic tests; will have to check tomorrow morning
    if needed.

    is anyone else seeing this behavior ?

    --- config extract ---
    log_denied
    log_ipfw_denied
    log
    deny_incoming
    #verbose

    globalport natd

    instance default
    interface tun0
    port 8670

    instance tun1
    interface tun1
    port 8671

    ...
    --- end --- 

    -- 
Greetings
Bjoern A. Zeeb				bzeeb at Zabbadoz dot NeT
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
  • Next message: Gleb Smirnoff: "any ng_device users?"

    Relevant Pages

    • Re: multiple natd + ipfw, with 2 internal ips
      ... I have a little problem with my natd or ipfw configuration. ... Well you could if you set your internal interface to be in promiscuous mode and set proxy arp for that address ... is the next hop router, it uses ARP to find the MAC address of this router. ...
      (freebsd-net)
    • syntec question on pf redirect
      ... I think I am getting a little mixed up on understanding pf redirection. ... with the style of setup I have. ... The way my rules are create is that I restrict on the tun0 ... https, ect) on that interface. ...
      (comp.unix.bsd.openbsd.misc)
    • RE: Routing With Two ISPs?
      ... >> on one interface, is there a way to make the outgoing packets from my ... First off, in /etc/services copy the natd line and rename it natd2, change ... the port number to 8669 as well. ... you have divert rules in place for both natd interfaces. ...
      (freebsd-net)
    • Re: Forward and NAT question
      ... Subject: Forward and NAT question ... If you're running NATD, you have at least 2 interfaces, this has to be ... access to the external interface where NATD is by default listening. ... - Packet is inbound via internal interface ...
      (freebsd-questions)
    • natd and ipfw external hangs
      ... em0 - external interface to the net 24.205.x.x ... natd seems to be doing the right thing. ... $IPFW 10 allow all from any to any via sk0 ... # Interface facing Public Internet ...
      (freebsd-questions)