Hi,

I just upgraded from FreeBSD 5.4 to FreeBSD 6.0 and now some of my ipf rules are no longer working. FreeBSD 6 has the following version op ipf:

IP Filter: v4.1.8 initialized.  Default = block all, Logging = enabled

The problem is the following NAT rule:

map ng0 10.0.0.2/0xff000000 -> 80.126.244.3/32

Which results in the following rule actually being added (ipnat -l):

map ng0 0.0.0.2/0.0.0.255 -> 80.126.244.3/32

This happened to me once before, really long ago, in an early FreeBSD 4 I think, then the above rule worked well until my upgrade to FreeBSD 6.0. Note that 10.0.0.2/8 *DOES* work (however I have a script which generates NAT rules from the internal to the external interface, which looks at ifconfig output to generate the appropriate rules; this is why I use the 0xff000000 version of the netmask).

Is this an ipf bug or is this FreeBSD specific?

Greetings,
Sebastiaan

Reply via email to