tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: ipfilter quirk



Hi, Darren,

If there is an existing relationship between a source and destination,
IP Filter will always use that translation, even if new rules are added.

When IPFilter is getting an interface address, with a rule such as this:

map wm0 10.0.0.0/8 -> 0/32

it will always take the first address on the interface wm0.

That makes sense, and it's trivial to ifconfig wm0 delete twice, then ifconfig wm0 with the addresses in the opposite order. But it always takes the first address even when using map wm0 10.0.0.0/8 -> secondaddress/32

That's the part that's confusing. Should I just not worry about that?

John


Home | Main Index | Thread Index | Old Index