[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: ipip (gif) tunnels and npf
John Klos <john%ziaspace.com@localhost> wrote:
>>> SHOULD, yes. Although I didn't put my config in the original message, it's
>>> exactly what you put and what's in the example configuration. From npfctl
>>> map re0 dynamic any -> 184.108.40.206 pass family inet4 from 10.0.100.0/24
>> Don't you want gif0 (or whatever) to be your external interface instead
>> of re0 ?
>Sorry - the context is in the original post. The gif tunnel is on a
>machine which is behind NAT, and the npf machine doing NAT isn't rewriting
You are correct, npf doesn't have support for encapsulated protocols
while ipf does. This will mean that gre(4) won't work either.
I guess one question is how far we should go to support this in 2017,
there is this thing called IPv6.
Main Index |
Thread Index |