IPFW / if_bridge / NAT

2008-03-28 Thread Jay L. T. Cornwall
Hi, I have a FreeBSD 7.0 machine bridging two segments of a network: vr0 --- bridge0 --- vr1 bridge0 has both unregistered and public IP aliases. In addition to bridging, I need the machine to perform NAT on packets originating from an unregistered subnet (192.168.1.0/24) outbound on interface

Re: IPFW / if_bridge / NAT

2008-03-28 Thread Freddie Cash
On March 28, 2008 10:35 am Jay L. T. Cornwall wrote: Hi, I have a FreeBSD 7.0 machine bridging two segments of a network: vr0 --- bridge0 --- vr1 bridge0 has both unregistered and public IP aliases. In addition to bridging, I need the machine to perform NAT on packets originating from an

Re: IPFW / if_bridge / NAT

2008-03-28 Thread Jay L. T. Cornwall
Freddie Cash wrote: This seemed to NAT packets outbound correctly, but the replies were never NAT'd back to the private IPs. I believe the presence of the bridge affects ipfw's ability to divert the appropriate packets. This configuration partly works: divert natd any from 192.168.1.0/24