Subject: ipnat multiple port redirects broken in 1.5_ALPHA?
To: None <current-users@netbsd.org>
From: Christopher Sekiya <wileyc@tuug.net>
List: current-users
Date: 07/02/2000 08:24:36
I've upgraded my NAT box from 1.4X to 1.5_ALPHA (sources current as of yesterday
morning), and I've found an oddity with the redirect facility of ipnat that
wasn't present in 1.4X.
With 1.4X, I could redirect two or more ports from the NAT box's external
interface to a box on the private network by doing this:
rdr ep0 0.0.0.0/0 port 80 -> 192.168.10.8 port 80 tcp
rdr ep0 0.0.0.0/0 port 25 -> 192.168.10.8 port 25 tcp
With 1.5_ALPHA, the first redirect works, but all subsequent redirects with
that external/internal IP pair (no matter what the port pair may be) fail with
an EEXIST.
Did I miss something? Or is the check-to-see-if-the-rule-already-exists code
no longer checking the port pairs?
-- Chris