On Wed, Dec 05, 2001 at 03:40:16AM -0800, Crist J . Clark wrote: > [This would be better on the -questions list or IPFilter list.] Sorry to be a pain in the ass, but is there a freebsd-ipfilter? haven't found any at http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/eresources.html
Or you meant another ipfilter list? :-/ > On Tue, Dec 04, 2001 at 09:05:10PM +0200, [EMAIL PROTECTED] wrote: > [snip] > > > -- ipnat.rules -- > > map xl0 172.27.0.0/23 -> x.x.x.x/32 proxy port ftp ftp/tcp > > map xl0 from 172.27.0.0/23 to any -> x.x.x.x/32 > > -- eof -- > > Try, > > map xl0 172.27.0.0/23 -> x.x.x.x/32 proxy port ftp ftp/tcp > map xl0 172.27.0.0/23 -> x.x.x.x/32 portmap tcp/udp auto > map xl0 172.27.0.0/23 -> x.x.x.x/32 > Doesn't work... Arjaan sugested 0/0 which solved my problem. Anyway, I was wondering who is in charge of ipfilter for freebsd. I grep-ed the man pages, but there was no reference what so ever to 0/0. Here's the new rule list, for those who had/have/will have this problem: -- ipnat.rules -- # Don't NAT for 172.27.40.0 map xl0 from 172.27.0.0/23 to 172.27.40.0/23 -> 0/0 proxy port ftp ftp/tcp map xl0 from 172.27.0.0/23 to 172.27.40.0/23 -> 0/0 # NAT everything else map xl0 from 172.27.0.0/23 to any -> x.x.x.x/32 proxy port ftp ftp/tcp map xl0 from 172.27.0.0/23 to any -> x.x.x.x/32 -- eof -- Thank you for your time, veedee. > -- > Crist J. Clark | [EMAIL PROTECTED] > | [EMAIL PROTECTED] > http://people.freebsd.org/~cjc/ | [EMAIL PROTECTED] > > To Unsubscribe: send mail to [EMAIL PROTECTED] > with "unsubscribe freebsd-net" in the body of the message To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
