Re: IPv6 NAT

2016-04-30 Thread Jason Lewis
Folks have said that IPv6 does not support NAT, so I believe they will not be putting it into IPFW. I do know that pf has supported IPv6 NAT or NAT6 since 2006 and it has been working great for me for more than five years. On 4/30/16, Georgios Amanakis via freebsd-ipfw

Re: ipfw on just inbound and not outbound

2015-04-16 Thread Jason Wolfe
it could garner some wider interest. Jason On Thu, Apr 16, 2015 at 12:12 AM, Ian Smith smi...@nimnet.asn.au wrote: On Thu, 16 Apr 2015 11:41:54 +0800, Julian Elischer wrote: On 4/15/15 5:09 AM, hiren panchasara wrote: Apologies if this is something silly but I want to completely eliminate

Re: [RFC][patch] Two new actions: state-allow and state-deny

2015-02-04 Thread Jason Lewis
The possible issue is is that once NAT changes the IP address and possibly the port number, state tracking can no longer be applied. AKA, the packet headers before the NAT is different than the packet headers after. This is why NAT needs to track the state instead of ipfw.

Re: IPFW tables, dummynet and IPv6

2011-12-20 Thread Jason Hellenthal
On Sun, Dec 18, 2011 at 03:58:30PM +0400, Alexander V. Chernikov wrote: Pawel Tyll wrote: Hi lists, Are there any plans to implement IPv6 tables in ipfw? It would seem that our gov. may want to force us into IPv6 in 6 months ;) I've got working implementation for IPv4+IPv6 and

Strange problem

2011-02-11 Thread Jason Mattax
wrong here? Jason Mattax -- Jason Mattax 575-418-1791 jmat...@storytotell.org ___ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to freebsd-ipfw-unsubscr...@freebsd.org

Code release of ipfw NAT support for SCTP in FreeBSD-8

2008-06-29 Thread Jason But
starting on the ipfw send interface - IPv6 support. Status - preliminary investigation. - Global IP address tracing. Status - preliminary investigation. Other tasks: - Exaustive testing of the various configurations and scenarios. - Stress and load testing. - Performance analysis. Jason

RE: IPFW Problem

2007-11-04 Thread Jason Lewis
Greg, My guess would be to look at rule 00800. I suspect that the network that you are having problems with is on BGE0. NAT and keep-state do not play well with each other. Jason On Sun, November 4, 2007 4:14 pm, [EMAIL PROTECTED] wrote: Hmm, I may well be missing something very obvious

Re: Policy Routing natd+ipfw

2007-05-05 Thread Jason Hills
On 5/5/07, Patrick Tracanelli [EMAIL PROTECTED] wrote: How can I do policy routing with ipfw+natd? I started 2 natd processes, using natd.conf and natd2.conf respectively, but things dont work. My rules are: Long time ago, PHK added an (undocumented, except for commit logs) feature in

Policy Routing natd+ipfw

2007-05-04 Thread Jason Hills
Hello. How can I do policy routing with ipfw+natd? I started 2 natd processes, using natd.conf and natd2.conf respectively, but things dont work. My rules are: ext_ifi1=em0 ext_ifi2=em1 divert 8668 ip from $net1 to any out via $ext_if1 divert 8669 ip from $net2 to any out via $ext_if2 divert