-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 05.02.2015 08:08, Ian Smith wrote:
>>> nat 9 config redirect_port tcp 192.168.134.2:16881 16881 >>> redirect_port udp 192.158.134.2:16881 16881 redirect_port tcp >>> 192.168.134.2:22 22222 >>> >>> nat 1 config ip $EXT_IP same_ports >> One more datapoint: if I merge this to one NAT (and change rules >> accordingly), redirect work as expected. >> >> But I have TWO different NATs in full config (for two ISPs) and >> don't want to duplicate all redirection specifications, but want >> to use third "common" NAT config. And such usage is shown in >> ipfw(8)! > Just curious .. what's your value of net.inet.ip.fw.one_pass? 0! But I found problem: LibAlias could not found link with empty "alias_addr". So, you need have one. Global ("nat config ip ...") or redirection-specific (redirect_port tcp 192.168.134.2:22 <ip>:22222). I'll try to fix it. > And does all of this really need cross-posting to net@ as well as > ipfw@? I'm not sure :) CC: removed. - -- // Lev Serebryakov AKA Black Lion -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQJ8BAEBCgBmBQJU0zblXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRGOTZEMUNBMEI1RjQzMThCNjc0QjMzMEFF QUIwM0M1OEJGREM0NzhGAAoJEOqwPFi/3EePB+wP/2VESImjMft6/1zpYfNo8eK5 jE4IwMgFF2Q91a1Ggr1VqsawW8f2hZnI2rLRzE7NioK8QRuq6T42DEGVk7pZJWKL xNoSBis7NxUh82ShiDJEyb+yXYOTOMFO8guDhE+zZ3hwAbG3uyjSk5LANKBV7XLT miA7z5DT85POJsijk4jPAa9L+UdJIT+vXeZZV/vQ1Xr7B1ImWu4ANGZPQ+A+wvEV ZPnV0dump5nZaUhR0CyPnCUU4tgn0WZS5K0qGjeyjaD5kjDktQ03tsz2m2JHUkM3 niK57PtwgTk8awaN2sZ+eSwj8Fvm0ffy+v/5grdd9GFOCPMYRsRCc9E7oGW7lG84 Wx4Bo3XXNteAXynlYwMS000gkRJCn9J2uFrMi+kLZXJFMI/S5vu2D/9TX6Z7jfvT wtUgZDGk/OWvDVEUH1Ru8gMrbd3jTi+wozDc7eCV7eScGCr/X5HqqxMLqchW6yYe d6KCpENzRTOAHWvKByHq/4xPZnkiFdGnDdJCMzQNd9H/uOdZ6CdFVYrA4qxrUBTU l20+kmEOtm12fRMnlDU1dML1NBPMsfCUIkkoGygJtFNTIxN8QZXysgWMMDMlg+1L 8Bl2QaFNLfueEfi7Vr+QZF9GEYrUU1Xtib9YBFMBmBWDB3YoLKa+r1gdtb2wSsUQ L6Clfv8DZHIdssCgIxFA =CdEJ -----END PGP SIGNATURE----- _______________________________________________ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"