Current-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: IPFilter issue in -current



On 8/01/2013 2:48 PM, Geoff Adams wrote:
...
> 
> In the meantime, I think I understand why I see so many ipf_nat_newrdr 
> failures.
> I'm not sure if it's an algorithmic problem, or if I just need to write 
> better rules.
> 
...
> map wm0 192.168.10.0/24 -> 0/32
> 
> rdr wm0 7.8.9.10/32 port 56789 -> 192.168.10.11 port 56789 tcp/udp

Lets try with better rules to start with and replace the map rule with these
two map rules:

map wm0 192.168.10.0/24 -> 0/32 portmap 10001-49151 tcp/udp
map wm0 192.168.10.0/24 -> 0/32

Darren




Home | Main Index | Thread Index | Old Index