Re: NATD / ipfw

2004-02-12 Thread Jonathan Chappelow
Christian, I recall reading some problems like this on this list recently. I don't remember if there was a solution for NATd, but running IPNAT compiled into the kernel has been highly efficient for my small office. I have no problems with transfers up to 3MB/sec. Maybe higher. I have also foun

Re: natd+ipfw+trafic shaping

2003-10-21 Thread .
Remember that rules checked twice if not defined "in" or "out". Look at net.inet.ip.fw.one_pass sysctl > Hi all, > can anyone explane why this rules doesn't work: > > rl0 EXTINF > rl1 INTINF > > add 1000 divert 8668 ip from any to any via rl0 > add 1200 allow ip from any to any via lo0 > add 130

Re: natd & ipfw config with 5 NICS

2002-02-28 Thread Crist J. Clark
On Thu, Feb 28, 2002 at 11:43:57AM -0600, Hamilton Hoover wrote: > Hi all, > > I'm setting up a site that I'd like to have four separate networks connected > > through a single gateway/firewall with five network interfaces. > > Two Public (real IPs) interfaces on the same network with different