Re: Mysterious packets with stateful ipfw+nat

2006-12-02 Thread Luigi Rizzo
On Sat, Dec 02, 2006 at 09:00:13PM +0100, Max Laier wrote: On Saturday 02 December 2006 19:00, James Halstead wrote: Ok, the obvious part that I think I was missing while it was late, was that these must be keep-alive packets generated by the firewall as the dynamic rules are about to

Re: Mysterious packets with stateful ipfw+nat

2006-12-02 Thread James Halstead
Luigi Rizzo wrote: On Sat, Dec 02, 2006 at 09:00:13PM +0100, Max Laier wrote: On Saturday 02 December 2006 19:00, James Halstead wrote: Ok, the obvious part that I think I was missing while it was late, was that these must be keep-alive packets generated by the firewall as the dynamic rules

Mysterious packets with stateful ipfw+nat

2006-12-01 Thread James Halstead
Ok, this has been driving me nuts for a while. I recently noticed that my 5.4-RELEASE firewall was having a problem with packet leakage. I am seeing the occasional packet on the outside interface with an internal src ip. I put a hub between my firewall and cable modem and verified that the

Re: [6.x patchset] Ipfw nat and libalias modules

2006-07-03 Thread Paolo Pisati
On Mon, Jul 03, 2006 at 01:42:36AM +1000, Vini Engel wrote: Paolo Pisati said the following on 15/05/06 08:05: Released a new revision of my libalias+ipfw work as a patchset for 6.x, get it here: http://mercurio.srv.dsi.unimi.it/~pisati/libalias/libalias-6.x.tgz fixed the checksum

Re: [6.x patchset] Ipfw nat and libalias modules

2006-07-02 Thread Vini Engel
Paolo Pisati said the following on 15/05/06 08:05: Released a new revision of my libalias+ipfw work as a patchset for 6.x, get it here: http://mercurio.srv.dsi.unimi.it/~pisati/libalias/libalias-6.x.tgz fixed the checksum corruption occurring to redirected/generated traffic to/by a local

Re: ipfw + nat

2006-06-08 Thread Chuck Swiger
mufalani wrote: Hi all, I have a webserver runing apache 2.3 under windows 2003, and one BSD 5.4 (gateway). How to redirect requisitions at 80´s port (200.X.X.X:80) to address (192.x.x.x:80) with nat and ipfw? echo redirect_port tcp 192.x.x.x:80 80 /etc/natd.conf See man natd

Re: ipfw + nat

2006-06-08 Thread Erik
Hi all, I have a webserver runing apache 2.3 under windows 2003, and one BSD 5.4 (gateway). How to redirect requisitions at 80´s port (200.X.X.X:80) to address (192.x.x.x:80) with nat and ipfw? Pretty simple if you are using natd. In /etc/rc.conf: ### Firewall Settings ###

Re: ipfw + nat

2006-06-08 Thread Nick Withers
On Wed, 7 Jun 2006 20:17:07 -0300 mufalani [EMAIL PROTECTED] wrote: Hi all, I have a webserver runing apache 2.3 under windows 2003, and one BSD 5.4 (gateway). How to redirect requisitions at 80´s port (200.X.X.X:80) to address (192.x.x.x:80) with nat and ipfw? Assuming

[6.x patchset] Ipfw nat and libalias modules

2006-05-14 Thread Paolo Pisati
Released a new revision of my libalias+ipfw work as a patchset for 6.x, get it here: http://mercurio.srv.dsi.unimi.it/~pisati/libalias/libalias-6.x.tgz fixed the checksum corruption occurring to redirected/generated traffic to/by a local interface on the nat box. For more info:

Re: [6.x patchset] Ipfw nat and libalias modules

2006-05-06 Thread Nenad Gavrilovic
Patrick Tracanelli wrote: Probably you dont have the latest RELENG_6 code or it is not in sync (say, manually modified). I have ipfw nat running on -RC1 and -RC2, i386 and amd64 and with clean src the patch applies perfectly. Yes, I try again. And I get error again! cd /usr/obj rm ALL cd

Re: [6.x patchset] Ipfw nat and libalias modules

2006-05-06 Thread Patrick Tracanelli
nat state, I think it is not). The box which is taking me to internet right now at my building is ipfw nat, for wired and wireless networks. Here are the running rules: ([EMAIL PROTECTED])~# ipfw show | grep nat 2 19812654104938057 nat 20 ip from { 10.69.69.0/24 or 172.16.69.0/24

Re: [6.x patchset] Ipfw nat and libalias modules

2006-05-05 Thread Nenad Gavrilovic
Paolo Pisati wrote: I just released a new revision of my libalias+ipfw work as a patchset for 6.x, get it here: http://mercurio.srv.dsi.unimi.it/~pisati/libalias/libalias-6.x.tgz To apply it: cp libalias_ipfw.patch /usr/src cd /usr/src patch -p3 libalias_ipfw.patch then you have to

Re: [6.x patchset] Ipfw nat and libalias modules

2006-05-05 Thread Paolo Pisati
Nenad Gavrilovic wrote: Paolo Pisati wrote: I just released a new revision of my libalias+ipfw work as a patchset for 6.x, get it here: http://mercurio.srv.dsi.unimi.it/~pisati/libalias/libalias-6.x.tgz To apply it: cp libalias_ipfw.patch /usr/src cd /usr/src patch -p3 libalias_ipfw.patch

Re: [6.x patchset] Ipfw nat and libalias modules

2006-05-05 Thread Patrick Tracanelli
libalias_ipfw.patch and make kernel I get the error as follows: Probably you dont have the latest RELENG_6 code or it is not in sync (say, manually modified). I have ipfw nat running on -RC1 and -RC2, i386 and amd64 and with clean src the patch applies perfectly. -- Patrick Tracanelli FreeBSD Brasil LTDA

Re: [6.x patchset] Ipfw nat and libalias modules

2006-05-05 Thread Nenad Gavrilovic
Paolo Pisati wrote: Nenad Gavrilovic wrote: Paolo Pisati wrote: I just released a new revision of my libalias+ipfw work as a patchset for 6.x, get it here: http://mercurio.srv.dsi.unimi.it/~pisati/libalias/libalias-6.x.tgz To apply it: cp libalias_ipfw.patch /usr/src cd /usr/src patch

[6.x patchset] Ipfw nat and libalias modules

2006-04-30 Thread Paolo Pisati
, sbin/ipfw, sbin/natd, sbin/ppp, lib/libalias, sys/modules/ipfw, sys/modules/libalias or simply do a world. With this patch you get: -ipfw nat + redirect + LSNAT support -libalias modules (both in user and kernel land) -for kernel land, all the libalias modules are installed in /boot/kernel

<    1   2