Subject: RE: ipnat rdr rules on the same segment?
To: 'mel kravitz' <mel@switchpwr.com>
From: David Woyciesjes <DAW@yalepress3.unipress.yale.edu>
List: tech-net
Date: 10/26/2000 12:14:08
IIRC, it would have to go in from one NIC, and out another. I would say to
check http://www.obfuscation.org/ipf/ipf-howto.txt for a better answer...
Check about halfway down, labelled page 26.

Taken from there...
"...
An extremely important point must be made  about  rdr:   You
cannot easily use this feature as a "reflector".  E.g:

     rdr tun0 20.20.20.5/32 port 80 -> 20.20.20.6 port 80 tcp

will  not  work  in the situation where .5 and .6 are on the
same  LAN  segment.   The rdr function is applied to packets
..."

---   David A Woyciesjes
---   C & IS Support Specialist
---   Yale University Press
---   mailto:david.woyciesjes@yale.edu
---   (203) 432-0953
---   ICQ # - 905818


-> -----Original Message-----
-> From: mel kravitz [mailto:mel@switchpwr.com]
-> Sent: Thursday, October 26, 2000 11:54 AM
-> To: tech-net@netbsd.org
-> Subject: ipnat rdr rules on the same segment?
-> 
-> 
-> Can ipnat (rdr )redirect port 80 from www(x.y.z.b)machine to
-> FW(x.y.z.a)machine when both reside on the same outside segment? Is a
-> rule such as the following possible?
-> rdr fxp0 x.y.z.b port 80 -> x.y.z.a port 80
-> -Mel
-> 
-> 
->