• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

nat

  1. m0nkey_

    IPFW Using IPFW to NAT a jail inside a VM == Slow network connectivity inside jail

    I've been pulling my hair out over this for days! I have a VM, jails on a loopback interface and using IPFW to NAT the traffic. My findings show that it slows to a crawl. I've also tested with PF and it works like a charm. Network speeds within the jail are fine. I've tested this on Vultr...
  2. J

    Solved In-kernel NAT dropping large UDP return packets

    When a T-Mobile "femto-cell" is trying to establish its IPv4, IPSEC tunnel to the T-Mobile provisioning servers, the 4640-byte return packet is silently dropped by the in-kernel NAT, even though it "matches" the outbound packet from less than 100 ms prior. All other operations of the firewall...
  3. Angelo Klin

    IPFW Private VPN + Firewall on a VPS

    Hello All, With all the fuzz and issues with security and privacy these days I decided to give it a go with a VPN, mostly for the fun and challenge. I am partially done with a scenario that sounds very typical these days, although it is not necessary plain vanilla. The overall idea is...
  4. DiscmanDaemon

    RPI3 B some issues with jails

    Hello all, I have been experimenting with running a project that works great on AMD64/X86 on an RPI3 B, and have had some hiccups with jails, and I am wondering if anyone has experienced anything similar, and has any idea as to the cause. I've noticed the standard method of NATting jails on a...
  5. J

    IPFW Cannot Get IPFW NAT to work

    I have spent days trying to get what I thought should be a simple set of ipfw nat rules set up. With less than zero success. I have read the documentation and scoured the web, and I assume I am just missing something. Scenario: I have one NIC card with four public IPs. I am running a bunch...
  6. Kay

    How to jail miniDLNA with NAT

    Hi I'm trying to set up a miniDLNA server inside a jail. When it's inside a jail, my LAN clients cannot access it. But if miniDLNA is installed outside of the jail, my LAN clients can successfully access it. My jail has it's private IP (192.168.60.3) address on host's lo1 interface. I then...
  7. K

    relayd with a source IP NAT?

    I'm attempting to use relayd to act as an extremely simple load-balancer between two machines, however all 3 machines are on entirely different public networks. However, it seems that relayd is just creating a rdr rule in pf, not a nat rule as well, so the packet is redirected but maintains...
  8. S

    IPSec VPN LAN-LAN (Site-Site) for site with dynamic gray IP behind NAT

    Hi There is a case: - HQ with fixed white IP - Site with dynamic gray IP behind NAT (!!!) Need to setup IPSec VNP LAN-LAN to connect site to HQ. I've tried Racoon and succeded with establishing IPSec connection, but LAN-LAN connection wasn't established. The same with StrongSwan - I can see...
  9. A

    iptables: Command not found. Why?!!

    I need to modify the NAT on the vpn server which is a FreeBSD 11.1-STABLE #0 r324546 raspberry Pi 2. It seems not to have iptables command. root@rpi2:~ # iptables -I FORWARD -i tun0 -o ue0 -s 10.8.0.0/24 -m conntrack --ctstate NEW -j ACCEPT iptables: Command not found. when I try to install it...
  10. DemoNIck

    propper routing and gateway configuration between 2 lan IPs

    There is a network topology which cannot be changed/altered as following: [FILESERVER]---192.168.254.1---->|======| [LANPC1]--------192.168.254.x---->| SWITCH |<--192.168.254.254--[MODEM]--->INTERNET [LANPC2]--------192.168.254.x---->|======| The FILESERVER (FreeBSD 11.1-RELEASE) is running...
  11. B

    IPFW About IPFW NAT...

    I'm running vm-bhyve on freebsd11.1. one IP on igb0. # ifconfig igb0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=2400b9<RXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,RXCSUM_IPV6> ether 6c:ae:8b:60:07:ca hwaddr...
  12. goshanecr

    Solved Subnet on ExtIF and ipfw nat not working

    Good day! Please, help me understand, how setup FreeBSD 11-STABLE amd64 router with several ip addresses on external interface. I have: Provider give me subnet 1.1.1.2/24 gw 1.1.1.1 /etc/rc.conf # Assigned external IP addresses ifconfig_rl0="inet 1.1.1.2/24" ifconfig_rl0_alias0="inet...
  13. D

    IPFW Is DNS hijacking possible on FreeBSD + IPFW?

    Hi All! I need to redirect all dns queries to local dns server (unbound) on router with FreeBSD 11 amd + ipfw nat. re0 - intranet [192.168.0.1] alias on re0 for unbound [10.0.0.1] re1 - internet [a.b.c.d] I try in various ways: ${FW} fwd 10.0.0.1,53 all from 192.168.0.0/24 to not 10.0.0.1 53...
  14. seanc@

    Solved FreeBSD 11 NAT hanging under VMware Fusion...

    This is a PSA to save future travelers some angst. Specifically, TCP connections would stall randomly after transferring a modest amount of data (i.e. >5MB xfer per TCP stream). As mentioned in my Discussion post to the VMware Fusion Forums, after much consternation, hand-wringing, and...
  15. unknownuser

    Host unable to load web pages from Jail - 408

    Hello everyone. I have a Windows 10 Workstation where I run a FreeBSD 10.3 Guest server over VMWare 12. This FreeBSD VM is meant to run multiple Apache/PHP/Wordpress instances on multiple jails. The FreeBSD guest is bridged through the HOST Ethernet NIC, where the HOST has the IP...
  16. barrandrea

    PF Redirect all traffic from ip to another

    Hi, i need to redirect all traffic from a private ip address attested on a local interface, to a public ip address. The old configuration with iptables it's something like this iptables:-A PREROUTING -d $private_ip/32 -i $int_if -j DNAT --to-destination $public_ip iptables:-A PREROUTING ! -d...
  17. B

    PF Is it possible to overcome "Strict-NAT" for 2 simultaneous devices behind PF?

    The below rules allow a single PC on my network to enjoy an "Open" NAT in Rainbow Six Siege multi-player (and many other games). This makes it possible for me to host games and improves match making speed. match out log on egress from !$gaming_pc to any nat-to ($ext_if:0) port...
  18. B

    IPFW ipfw nat stateful redirect of a port

    Hello everyone! I have few network services running in jailed configuration on a server, and I use ipfw to protect the server against possible attacks, and to provide its local clients with access to internet. The goal I want to achieve is redirection of some ports of jailed services to the...
  19. M

    PF NAT failing for large payload pings

    I have noticed an odd problem with NAT in pf and was wondering if this should behave the way it is. The router host is running pf doing NAT and a PPPoE connection to the internet using /usr/sbin/ppp (a.k.a. user-ppp). The ppp session is not doing any NATing. An extract of my pf.conf is as...
  20. dave

    PF pf: NAT Multiple Internal (LAN) Interfaces

    Hello, I cannot seem to find information on how to perform NAT for multiple internal (LAN) interfaces with pf. I have a very simple set of rules for performing basic NAT: # Definitions ext_if = "wlan0" # macro for external interface - use tun0 for PPPoE int_if = "ue0" #...
Top