Re: Re: nat and ipfw - divert or builtin

From: Randy Bush <randy@xxxxxxx>
Date: Mon, 24 Sep 2007 10:05:47 -1000

divert
ipnat
ipfw's integrated nat

I believe the integrated version makes configuration simpler. I would
choose the old classic divert with ipfw if it is for a important network
that must work, but if I was running -current I would try the integrated
variant beacuse it seems to be simpler to use.

you seem to imply that you have reason to suspect that ipfw integrated
nat might not be reliable, or at least not as reliable as divert+natd.
any particular experiences or gossip to tell?

randy
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Follow-Ups:
- Re: nat and ipfw - divert or builtin
  - From: Christer Hermansson

References:
- nat and ipfw - divert or builtin
  - From: Randy Bush
- Re: nat and ipfw - divert or builtin
  - From: Christer Hermansson

Prev by Date: Re: TX Multiqueue?
Next by Date: Re: Large-scale 1-1 NAT
Previous by thread: Re: nat and ipfw - divert or builtin
Next by thread: Re: nat and ipfw - divert or builtin
Index(es):
- Date
- Thread

Relevant Pages

ipfw with NAT and ARP
... ipfw add divert natd all from any to any via xl1 ... When testing "ping" from
external to external IP-Adress of my firewall, ... After restarting system with above configuration
of icmp-protocol no ... "ipfw add allow all from any to any" ping-request get an answer.
... (freebsd-questions)
Re: ipfw with NAT and ARP
... > But, I wont so a simple firewall and for this reason, first I want to ...
> ipfw add divert natd all from any to any via xl1 ... thats the configuration
of the rest of my ... There are kernel options which control whether IPFW is ...
(freebsd-questions)
IPFW Configuration
... I am sort of a newbie to IPFW for FreeBSD-5.2.1. ... used it and need some help
with the configuration. ... With the support for IPFW in the ... firewall
off right now is because i was told that rc.firewall in /etc ... (freebsd-questions)
Re: ipfw woes
... Dom wrote: ... about that configuration: You can not block all ICMP.
... Please do post the output of ipfw show as opposed to the script. ... (comp.unix.bsd.freebsd.misc)
[fw-wiz] ipfw Configuration (Newbie Question)
... I am very new to ipfw and I am having a great deal of trouble getting it ...
I have a network with a Mac OSX server that is acting as a router. ... LAN IP Range:
10.0.0.0/24 ... The above configuration lets me access the server from the administrator’s
... (Firewall-Wizards)