Re: ipnat problem, I do not understand this

From: Brian A. Seklecki (lavalamp_at_spiritual-machines.org)
Date: 10/31/03


Date: Thu, 30 Oct 2003 21:22:15 -0500

On Tue, 28 Oct 2003 07:47:05 +0800, mylinux wrote:

> #!/sbin/ipnat -f -
> #
> # THIS EXAMPLE IS WRITTEN FOR IP FILTER 3.3

it would be nice if ipnat syntax understood $(IFNAME) syntax like it's
big brother, but, it does not.

also, i'm not sure how $(IF) syntax deals with multiple IPs on a phyiscal
interface.

i still advocate solaris/linux stytle interfaces

-lava

> #
> # ppp0 - (external) PPP connection to ISP, address a.b.c.d/32
> #
> # ed0 - (internal) network interface, address w.x.y.z/32
> #
> # if we get a different dialup IP address each time, then we would use:
> #
> #map rtk0 192.168.0.0/24 -> 0/32 proxy port ftp ftp/tcp
> map rtk0 192.168.0.0/24 -> 0/32 portmap tcp/udp 20000:60000
> map rtk0 192.168.0.0/24 -> 0/32
> rdr rtk0 0.0.0.0/0 port 1080 -> 192.168.0.10 port 1080 tcp
> #rdr rtk1 0.0.0.0/0 port 80 -> 192.168.0.1 port 3128 tcp
> #rdr tun0 192.168.0.1/32 port 80 -> 192.168.0.1 port 80 tcp
> #rdr tun0 0.0.0.0/0 port 80 -> 192.168.0.1 port 3128 tcp
> ~