Hi,
I just upgraded from FreeBSD 5.4 to FreeBSD 6.0 and now some of my ipf
rules are no longer working. FreeBSD 6 has the following version op ipf:
IP Filter: v4.1.8 initialized. Default = block all, Logging = enabled
The problem is the following NAT rule:
map ng0 10.0.0.2/0xff000000 -> 80.126.244.3/32
Which results in the following rule actually being added (ipnat -l):
map ng0 0.0.0.2/0.0.0.255 -> 80.126.244.3/32
This happened to me once before, really long ago, in an early FreeBSD 4
I think, then the above rule worked well until my upgrade to FreeBSD
6.0. Note that 10.0.0.2/8 *DOES* work (however I have a script which
generates NAT rules from the internal to the external interface, which
looks at ifconfig output to generate the appropriate rules; this is why
I use the 0xff000000 version of the netmask).
Is this an ipf bug or is this FreeBSD specific?
Greetings,
Sebastiaan