Re: Ultrabasic guide to NAT

2009-07-03 Thread Michiel van Baak
On 02:18, Fri 03 Jul 09, Manuel Ravasio wrote:
> I'm still missing a point: how do I map more than 1 IP address on a single 
> physical interface?
> 
> Is there something like Linux' and Solaris'
> ifconfig [interface]:1 blah blah blah
> ?

man hostname.if

> 
> Thanks again,
> Manuel
> 
> 
>  --
> Hana wa sakuragi, hito wa bushi
> 
> 
> 
> - Original Message 
> > From: Lars Nooden 
> > To: Manuel Ravasio 
> > Cc: openbsd 
> > Sent: Thursday, July 2, 2009 1:29:53 PM
> > Subject: Re: Ultrabasic guide to NAT
> > 
> > Manuel Ravasio wrote:
> > > ... I don't have much time to ... 
> > 
> > There's your problem.  Try to plan better next time.
> > 
> > > Can someone point me to some proper documentation,
> > 
> > http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf
> > 
> > > ... some howtos,...?
> > 
> > http://www.openbsd.org/faq/pf/nat.html
> > http://home.nuug.no/~peter/pf/en/nat.html
> > http://home.nuug.no/~peter/pf/en/basicgw.html
> > http://www.thedeepsky.com/howto/newbie_pf_guide.php
> > 
> > See also
> > 
> > http://openbsd.org/support.html
> > http://www.openbsdfoundation.org/
> > 
> > Regards
> > -Lars
> 

-- 

Michiel van Baak
mich...@vanbaak.eu
http://michiel.vanbaak.eu
GnuPG key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x71C946BD

"Why is it drug addicts and computer aficionados are both called users?"



Re: Ultrabasic guide to NAT

2009-07-03 Thread Manuel Ravasio
Whooops...
Sorry, I missed it.

Thank you again,
Manuel

 --
Hana wa sakuragi, hito wa bushi



- Original Message 
> From: Maurice Janssen 
> To: Manuel Ravasio 
> Cc: openbsd 
> Sent: Friday, July 3, 2009 12:26:20 PM
> Subject: Re: Ultrabasic guide to NAT
> 
> On Fri, Jul 03, 2009 at 02:18:40AM -0700, Manuel Ravasio wrote:
> >I'm still missing a point: how do I map more than 1 IP address on a single 
> physical interface?
> >
> >Is there something like Linux' and Solaris'
> >ifconfig [interface]:1 blah blah blah
> >?
> 
> http://www.OpenBSD.org/faq/faq6.html#Setup.aliases



Re: Ultrabasic guide to NAT

2009-07-03 Thread Maurice Janssen
On Fri, Jul 03, 2009 at 02:18:40AM -0700, Manuel Ravasio wrote:
>I'm still missing a point: how do I map more than 1 IP address on a single 
>physical interface?
>
>Is there something like Linux' and Solaris'
>ifconfig [interface]:1 blah blah blah
>?

http://www.OpenBSD.org/faq/faq6.html#Setup.aliases



Re: Ultrabasic guide to NAT

2009-07-03 Thread Peter van Oord van der Vlies

On Fri, 3 Jul 2009, Manuel Ravasio wrote:


I'm still missing a point: how do I map more than 1 IP address on a single 
physical interface?

Is there something like Linux' and Solaris'
ifconfig [interface]:1 blah blah blah
?


ifconfig ifname alias ipnumber 255.255.255.255



Re: Ultrabasic guide to NAT

2009-07-03 Thread Manuel Ravasio
I'm still missing a point: how do I map more than 1 IP address on a single 
physical interface?

Is there something like Linux' and Solaris'
ifconfig [interface]:1 blah blah blah
?

Thanks again,
Manuel


 --
Hana wa sakuragi, hito wa bushi



- Original Message 
> From: Lars Nooden 
> To: Manuel Ravasio 
> Cc: openbsd 
> Sent: Thursday, July 2, 2009 1:29:53 PM
> Subject: Re: Ultrabasic guide to NAT
> 
> Manuel Ravasio wrote:
> > ... I don't have much time to ... 
> 
> There's your problem.  Try to plan better next time.
> 
> > Can someone point me to some proper documentation,
> 
> http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf
> 
> > ... some howtos,...?
> 
> http://www.openbsd.org/faq/pf/nat.html
> http://home.nuug.no/~peter/pf/en/nat.html
> http://home.nuug.no/~peter/pf/en/basicgw.html
> http://www.thedeepsky.com/howto/newbie_pf_guide.php
> 
> See also
> 
> http://openbsd.org/support.html
> http://www.openbsdfoundation.org/
> 
> Regards
> -Lars



Re: Ultrabasic guide to NAT

2009-07-02 Thread Manuel Ravasio
> > ... I don't have much time to ... 
> 
> There's your problem.  Try to plan better next time.

Eh...
Sometimes you can, sometimes shit just happens and you have to manage it the 
way it comes :-).

> > Can someone point me to some proper documentation,
> 
> http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf
> 
> > ... some howtos,...?
> 
> http://www.openbsd.org/faq/pf/nat.html
> http://home.nuug.no/~peter/pf/en/nat.html
> http://home.nuug.no/~peter/pf/en/basicgw.html
> http://www.thedeepsky.com/howto/newbie_pf_guide.php
> 
> See also
> 
> http://openbsd.org/support.html
> http://www.openbsdfoundation.org/

Thank you!

Manuel



Re: Ultrabasic guide to NAT

2009-07-02 Thread Lars Nooden
Manuel Ravasio wrote:
> ... I don't have much time to ... 

There's your problem.  Try to plan better next time.

> Can someone point me to some proper documentation,

 http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf

> ... some howtos,...?

 http://www.openbsd.org/faq/pf/nat.html
 http://home.nuug.no/~peter/pf/en/nat.html
 http://home.nuug.no/~peter/pf/en/basicgw.html
 http://www.thedeepsky.com/howto/newbie_pf_guide.php

See also

 http://openbsd.org/support.html
 http://www.openbsdfoundation.org/

Regards
-Lars



Ultrabasic guide to NAT

2009-07-02 Thread Manuel Ravasio
Hello list.

I know this is a very simple issue, but I can't find a quick answer and I don't 
have much time to google around; I need the thing working in short time.

OpenBSD + PF firewall, connecting 3 "internal" networks to an "external" one.
The firewall has 5 NICs, re0 to re4; re0 is connected to the external network, 
re1 to re3 to internal networks; re4 is currently unused.
I have a single "external" IP mapped on re0 and 3 "nat" pf rules, one for each 
"internal" network, plus some basic filtering. Very simple, works ok.

Now I need to get a second "public" address and create a 1:1 map to an 
"internal" host.
I understand I have to use a "binat" rule, which looks very simple, but I still 
miss the whole procedure.

I suppose somehow I have to map the second public address to re0, then apply 
the binat rule; otherwise I can use re4.

Can someone point me to some proper documentation, some howtos,...?
Otherwise, can someone give me a list of the logical steps to achieve this 
trivial goal?

Thank you all!

Byee,
Manuel


 --
Hana wa sakuragi, hito wa bushi