Subject: Re: Problems with ipnat on NetBSD 2.0.2
To: Chris Ross <cross+ipfilter@distal.com>
From: Darren Reed <darrenr@reed.wattle.id.au>
List: tech-net
Date: 04/01/2005 18:14:52
>    In NetBSD 2.0.x, there is ipfilter 4.1.3.  On my NetBSD 2.0.x router, 
> I have
> ipfilter installing IPv6 rules, and IPv4 rules, and I have ipnat 
> configured to
> do NATing.
> 
>    Amongst the rules I have in my ipnat.conf, I have:
> 
> # Redirect outgoing HTTP queries to the squid cache
> rdr vlan1 0/0 port 80 -> 127.0.0.1 port 3128 tcp
> 
>    This works just fine for IPv4.  However, it appears that it is 
> attempting to
> do this port map, erroniously, on IPv6 as well.  My ipf6.conf logs 
> blocked out-
> going packets, and sees:
..

This has already been raised and when 4.1.8 gets imported into -current,
a fix will showup there soon.

If you plan to stick with 2.0.x then it may be necessary to roll a patch
and send that to releng.

Darren