Re: nat and dynamic external address

2010-08-07 Thread Ian Smith
On Thu, 5 Aug 2010, Michael wrote: > Am I right thinking that "if interface" and "reset" parameters should be > enough to handle changing address (DHCP) on external interface? In theory. > My rules: > > ipfw -q nat 1 config reset if $if_ext log same_ports > ipfw -q add nat 1 udp from $jai

nat and dynamic external address

2010-08-04 Thread Michael
Hello. Am I right thinking that "if interface" and "reset" parameters should be enough to handle changing address (DHCP) on external interface? My rules: ipfw -q nat 1 config reset if $if_ext log same_ports ipfw -q add nat 1 udp from $jail_ip to $dns out xmit $if_ext jail $jail_jid ipfw -q ad