tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: ipip (gif) tunnels and npf



> 01:20:16.772680 IP 10.0.100.97 > 74.118.183.200: IP 192.80.49.79 > 192.80.49.78: ICMP echo request, id 3384, seq 0, length 64 (ipip-proto-4)
> 01:20:17.777222 IP 10.0.100.97 > 74.118.183.200: IP 192.80.49.79 > 192.80.49.78: ICMP echo request, id 3384, seq 1, length 64 (ipip-proto-4)
> > They're clearly not rewritten.

NAT should look at packets on the outgoing interface and these should be rewritten, wether they are e.g. IP+TCP or IP+IP packets shouldn't matter.

SHOULD, yes. Although I didn't put my config in the original message, it's exactly what you put and what's in the example configuration. From npfctl show:

map re0 dynamic any -> 76.169.240.26 pass family inet4 from 10.0.100.0/24

Should I create a PR?

John


Home | Main Index | Thread Index | Old Index