On Tue, Mar 19, 2002 at 02:31:12PM +0700, Eugene Grosbein wrote:
> "Crist J. Clark" wrote:
>
> > > Suppose we have many tens of separated private networks each having its own
> > > public address and own gateway. Is is possible to configure natd to do
> > > static nat for network masks, not only for sets of hosts? I'd like to
> > > say:
> > >
> > > redirect_address 172.20.2.0/24 123.45.56.78
> > > redirect_address 172.20.2.1 123.45.56.78
> > >
> > > so incoming traffic for 123.45.56.78 is translated to 172.20.2.1
> > > and all outgoing traffic from the whole net 172.20.2.0/24 is aliases
> > > to appear from 123.45.56.78?
> > >
> > > It seems natd can't do that now. So how can it be achived without
> > > flooding config of natd with all those IPs from all those networks?
> >
> > You can run multiple natd(8)s and control which block each one
> > translates with their firewall divert(4) rules.
>
> I think running tens copies of natd is not wise.
natd(8)'s memory footprint isn't too big. As long as you have the RAM
for it, I don't think running multiple natd(8)'s would be too bad. But
I've never run more than two.
> Would it be hard to implement this?
Probably not too bad. Apparently no stampede for this functionality
though. There usually is not a lot to gain by mapping different
internal networks to different external addresses except maybe some
warm fuzzies.
> Is it issue of natd itself or of libalias?
I think it's more of a libalias(3) issue.
--
Crist J. Clark | [EMAIL PROTECTED]
| [EMAIL PROTECTED]
http://people.freebsd.org/~cjc/ | [EMAIL PROTECTED]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message
