Re: [users] NAT in NPF

["Luis P. Mendes" <luislupe%gmx.com@localhost>]

Hi,



On 20191129 21:22:19 +0300, Vladimir Zakrevskiy wrote:
> Hello!
>
> I have a strange situation when configuring NAT.
>
> I have installed NetBSD on xen domU, enable ip forwarding and enable NPF.
>
> npf.conf:
>
> $ext_if = "xennet0"
> $int_if = "xennet1"
> $ext_addr = { inet4(xennet0) }
> $int_addr = { inet4(xennet1) }
> $localnet = { 172.20.76.0/24 }
>
> alg "icmp"
>
> #NAT
> map $ext_if $localnet -> $ext_addr
>
> With this config NAT is not working. Packets received on int_if and
> don`t transmited from ext_if.
>
> If i remove "map $ext_if $localnet -> $ext_addr" packets correct
> transmited from ext_if.

I've setup an ARM based router and have some difficulties, as well.
My map line is:

map $ext_if dynamic 192.168.1.0/24 -> ifaddrs(ure0)

Be sure if you can treat xennet0 as using a static address.
Otherwise, if it changes, ifaddrs() should come in place of inet4()

Other odd thing (for me) thast I've experienced, is that
/etc/rc.d/npf_boot required the config file to be /etc/npf.bood.conf
and not /etc/npf.conf.
So, I `cp -l` /etc/npf.conf to /etc/npf.boot.conf.

Hope you can work it out.


Luis