NAT with one interface

Status
Not open for further replies.
C

cybercoder

I searched the forum deeply but didn't find anything useful

i need to use NAT on 1 interface.

Code: 
ipfw add 10 divert natd ip from 192.168.140.0/24 to $valid_IP

but it doesn't work!
( kernel compiled correctly and rc.conf is configured )

how can i see NAT table or test NAT?
 
I think it's possible to NAT on a single interface with the public IP as the primary address and the private IP as an alias, no? Don't use ipfw though. I think pf uses something like:

Code: 
nat on $ext_if from ! $ext_if:0 to any -> $ext_if:0
 
I think it's possible to NAT on a single interface with the public IP as the primary address and the private IP as an alias, no? Don't use ipfw though
Click to expand...
is purpose of those sentences, i should use NATD directly ?
 
Maybe experiment with -alias_address instead of -interface (see natd(8)). If you specify the public IP address instead of the interface name you may be able to have RFC1918 addresses on that interface translated to the public IP address. Not tested, as I don't use IPFW. I'm sure someone on here will be able to confirm/deny.
 
I used to configure NAT on a single interface but nothing fancy with my ipfw. Kernel compiled with options 'IPFIREWALL' and 'IPDIVERT'.

My natd service runs against tun0.
# natd -interface tun0

And with IP forwarding enabled:
net.inet.ip.forwarding: 1

The rest in my /etc/rc.conf (I think..):
Code: 
gateway_enable="YES"
firewall_enable="YES"
firewall_type="OPEN"
natd_enable="YES"
natd_interface="tun0"
natd_flags="
 
What I meant by not being able to bounce off of the same interface is that you cannot redirect an incoming packet back out the same interface. As long as you stay on the same machine it shouldn't be a problem. You can NAT to lo1 i.e. But to be honest I really don't see the point of it.

Perhaps you can elaborate on what you're trying to archive? There may be far simpler solutions.
 
there's only one solutions and i should NAT (overload) a range of invalid ip addresses to a valid ip address,
i'll go to use fedora core!
 
Status
Not open for further replies.
Back
Top