Subject: Re: Problems with ipnat on NetBSD 2.0.2
To: Chris Ross <cross+ipfilter@distal.com>
From: Darren Reed <darrenr@reed.wattle.id.au>
List: tech-net
Date: 04/01/2005 18:14:52
> In NetBSD 2.0.x, there is ipfilter 4.1.3. On my NetBSD 2.0.x router,
> I have
> ipfilter installing IPv6 rules, and IPv4 rules, and I have ipnat
> configured to
> do NATing.
>
> Amongst the rules I have in my ipnat.conf, I have:
>
> # Redirect outgoing HTTP queries to the squid cache
> rdr vlan1 0/0 port 80 -> 127.0.0.1 port 3128 tcp
>
> This works just fine for IPv4. However, it appears that it is
> attempting to
> do this port map, erroniously, on IPv6 as well. My ipf6.conf logs
> blocked out-
> going packets, and sees:
..
This has already been raised and when 4.1.8 gets imported into -current,
a fix will showup there soon.
If you plan to stick with 2.0.x then it may be necessary to roll a patch
and send that to releng.
Darren