tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: ipip (gif) tunnels and npf

> 01:20:16.772680 IP > IP > ICMP echo request, id 3384, seq 0, length 64 (ipip-proto-4)
> 01:20:17.777222 IP > IP > ICMP echo request, id 3384, seq 1, length 64 (ipip-proto-4)
> > They're clearly not rewritten.

NAT should look at packets on the outgoing interface and these should be rewritten, wether they are e.g. IP+TCP or IP+IP packets shouldn't matter.

SHOULD, yes. Although I didn't put my config in the original message, it's exactly what you put and what's in the example configuration. From npfctl show:

map re0 dynamic any -> pass family inet4 from

Should I create a PR?


Home | Main Index | Thread Index | Old Index