Hello guys,

Following this link: http://www.nimlabs.org/~nim/dirtynat.html
I learned that I can do some "dirty NAT trick" in my firewall.

So.. How can I manage the PREROUTING and POSTROUTING rules in PF? And
Netmap?

Using Iptables/netfilter could be this:
iptables -v -t nat -A PREROUTING -d 192.168.8.0/24 -j NETMAP --to
10.22.8.0/24
iptables -v -t nat -A PREROUTING -i tap0 -d 10.22.0.0/16 -j NETMAP --to
192.168.0.0/16
iptables -v -t nat -A POSTROUTING -o tap0 -s 192.168.0.0/16 -j NETMAP
--to 10.22.0.0/16
iptables -v -t nat -A POSTROUTING -o eth0 -s 10.22.0.0/16 -j NETMAP
--to 192.168.0.0/16

Thank you!

Reply via email to