NetBSD Problem Report #49652

From www@NetBSD.org  Mon Feb  9 16:30:45 2015
Return-Path: <www@NetBSD.org>
Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "mail.netbsd.org", Issuer "Postmaster NetBSD.org" (verified OK))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 821B5A6551
	for <gnats-bugs@gnats.NetBSD.org>; Mon,  9 Feb 2015 16:30:45 +0000 (UTC)
Message-Id: <20150209163044.778F7A65BC@mollari.NetBSD.org>
Date: Mon,  9 Feb 2015 16:30:33 +0000 (UTC)
From: gergely@egervary.hu
Reply-To: gergely@egervary.hu
To: gnats-bugs@NetBSD.org
Subject: ipnat: map [ifname] from [addr] to [addr] syntax broken
X-Send-Pr-Version: www-1.0

>Number:         49652
>Category:       kern
>Synopsis:       ipnat: map [ifname] from [addr] to [addr] syntax broken
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    ipf-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Feb 09 16:35:00 +0000 2015
>Last-Modified:  Mon Oct 10 01:27:03 +0000 2016
>Originator:     Gergely EGERVARY
>Release:        NetBSD-6.1_STABLE
>Organization:
>Environment:
NetBSD galileo.poli.hu 6.1_STABLE NetBSD 6.1_STABLE (GALILEO) #0: Thu May  1 14:00:54 CEST 2014  root@venus.poli.hu:/usr/src/sys/arch/amd64/compile/GALILEO amd64
>Description:
These settings work good:

map vlan12 10.0.0.0/8 -> 193.225.174.1/32 proxy port 21 ftp/tcp
map vlan12 10.0.0.0/8 -> 193.225.174.1/32 portmap tcp/udp 20000:24999
map vlan12 10.0.0.0/8 -> 193.225.174.1/32

ipnat.conf manual says this one should be the same:

map vlan12 from 10.0.0.0/8 to 0.0.0.0/0 -> 193.225.174.1/32 proxy port 21 ftp/tcp
map vlan12 from 10.0.0.0/8 to 0.0.0.0/0 -> 193.225.174.1/32 portmap tcp/udp 20000:24999
map vlan12 from 10.0.0.0/8 to 0.0.0.0/0 -> 193.225.174.1/32

However, it does not work properly. I can ping, and transfer some data, but I can't load webpages at all for example.

>How-To-Repeat:
Use ipnat rules in "fromto" format...

>Fix:

>Release-Note:

>Audit-Trail:

Responsible-Changed-From-To: kern-bug-people->ipf-bug-people
Responsible-Changed-By: dholland@NetBSD.org
Responsible-Changed-When: Mon, 10 Oct 2016 01:27:03 +0000
Responsible-Changed-Why:
to ipf folks


>Unformatted:

Home	PR Database Search