Subject: ipnat multiple port redirects broken in 1.5_ALPHA?
To: None <current-users@netbsd.org>
From: Christopher Sekiya <wileyc@tuug.net>
List: current-users
Date: 07/02/2000 08:24:36
I've upgraded my NAT box from 1.4X to 1.5_ALPHA (sources current as of yesterday
morning), and I've found an oddity with the redirect facility of ipnat that
wasn't present in 1.4X.

With 1.4X, I could redirect two or more ports from the NAT box's external
interface to a box on the private network by doing this:

	rdr ep0 0.0.0.0/0 port 80 -> 192.168.10.8 port 80 tcp
	rdr ep0 0.0.0.0/0 port 25 -> 192.168.10.8 port 25 tcp

With 1.5_ALPHA, the first redirect works, but all subsequent redirects with
that external/internal IP pair (no matter what the port pair may be) fail with
an EEXIST.

Did I miss something?  Or is the check-to-see-if-the-rule-already-exists code
no longer checking the port pairs?

-- Chris