Newbie question: is net.inet.ip.fastforwarding intended for routersonly?

[Andre Oppermann]

Xin LI wrote:
> 
> Hi Andre,
> 
> Thank you for the information.
> 
> I have a NAT gateway running with the following ipnat.rules:
> 
> -----------------------------------------------------------------------
> map fxp0 172.22.1.0/24 -> 0.0.0.0/32 proxy port ftp ftp/tcp
> map fxp0 172.22.1.0/24 -> 0.0.0.0/32 portmap tcp/udp 1025:7999
> map fxp0 172.22.1.0/24 -> 0.0.0.0/32 portmap tcp/udp 49152:65535
> map fxp0 172.22.1.0/24 -> 0.0.0.0/32
> 
> # Internal Servers
> rdr fxp0 0.0.0.0/0 port 8100 -> 172.22.1.1 port 8100
> rdr fxp0 0.0.0.0/0 port 3389 -> 172.22.1.1 port 3389
> -----------------------------------------------------------------------
> 
> And I have two if's installed, one is fxp0 (configured as
> 192.168.122.253/24) and the other is dc0(configured as 172.22.1.254/24).
> When the fastforwarding is set to 0, it works well, however if I turn it to
> 1, the packets immediately stops to flow between the two if's.
> (DEVICE_POLLING is enabled).
> 
> So I guess I have done something wrong? Not so sure in this issue though...
> Thanks in advance.

What exact version of FreeBSD are you running?  I must admit that I
was only able to do limited tests with ipfilter.  IPFW I could test
to the full extent.  The more information I get from you the better
I can track down where the problem is.

-- 
Andre


> Xin LI
> 
> ----- Original Message -----
> From: "Andre Oppermann" <andre at freebsd.org>
> To: "Xin LI" <delphij at frontfree.net>
> Cc: <freebsd-net at FreeBSD.org>
> Sent: Sunday, January 18, 2004 1:53 AM
> Subject: Re: Newbie question: is net.inet.ip.fastforwarding intended for
> routersonly?
> 
> > I have written a new fastforward code for 5.2 and -current which does
> > everything including ipfw, NAT and ipfilter.