NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

kern/49652: ipnat: map [ifname] from [addr] to [addr] syntax broken



>Number:         49652
>Category:       kern
>Synopsis:       ipnat: map [ifname] from [addr] to [addr] syntax broken
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Feb 09 16:35:00 +0000 2015
>Originator:     Gergely EGERVARY
>Release:        NetBSD-6.1_STABLE
>Organization:
>Environment:
NetBSD galileo.poli.hu 6.1_STABLE NetBSD 6.1_STABLE (GALILEO) #0: Thu May  1 14:00:54 CEST 2014  root%venus.poli.hu@localhost:/usr/src/sys/arch/amd64/compile/GALILEO amd64
>Description:
These settings work good:

map vlan12 10.0.0.0/8 -> 193.225.174.1/32 proxy port 21 ftp/tcp
map vlan12 10.0.0.0/8 -> 193.225.174.1/32 portmap tcp/udp 20000:24999
map vlan12 10.0.0.0/8 -> 193.225.174.1/32

ipnat.conf manual says this one should be the same:

map vlan12 from 10.0.0.0/8 to 0.0.0.0/0 -> 193.225.174.1/32 proxy port 21 ftp/tcp
map vlan12 from 10.0.0.0/8 to 0.0.0.0/0 -> 193.225.174.1/32 portmap tcp/udp 20000:24999
map vlan12 from 10.0.0.0/8 to 0.0.0.0/0 -> 193.225.174.1/32

However, it does not work properly. I can ping, and transfer some data, but I can't load webpages at all for example.

>How-To-Repeat:
Use ipnat rules in "fromto" format...

>Fix:



Home | Main Index | Thread Index | Old Index