OpenForum RSS: IPFW + alias

IPFW + alias (universite)

Thu, 02 Jun 2011 09:53:30 GMT

>[�� ]
>
> to accept packets addressed to the old interface. If
> the address
>
> is on the same subnet as the first network address
> for this
>
> interface, a non-conflicting netmask must be given. Usually
>
> 0xffffffff is most appropriate.

[code]
[12:51]vm1:root->/root# uname -a
FreeBSD vm1.local 8.2-STABLE FreeBSD 8.2-STABLE #0: Fri May 27 02:30:57 EEST 2011 root@vm1.local:/usr/obj/usr/src/sys/virtualbox.2 amd64
[12:51]vm1:root->/root# ifconfig lo0 inet 1.1.1.2/30 alias
[12:51]vm1:root->/root# ifconfig lo0 inet 1.1.1.1/29 alias
[12:51]vm1:root->/root# ifconfig lo0
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=3<RXCSUM,TXCSUM>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x7
inet 1.1.1.2 netmask 0xfffffffc
inet 1.1.1.1 netmask 0xfffffff8
nd6 options=3<PERFORMNUD

IPFW + alias (a2l)

Thu, 02 Jun 2011 03:34:27 GMT

>[�� ]
>>>> �� ݣ 250 ��. � �� .
>>>> �� IPFW.rules ��
>>>> IP �� Ip �� alias. �� Ip
>>>> 172.16.6.65?
>>> �.�. �� ip �� ?
>>> � ��? 8-()
>> �� - ��
> �� .
> �.�. 1.1.1.1 255.255.255.248 � 1.1.1.2 255.255.255.252 ��
> ��?

man ifconfig
/alias

alias Establish an additional network address for this interface. This
is sometimes useful when changing network numbers, and one wishes
to accept packets addressed to the old interface. If the address
is on the same subnet as the first network address for this
interface, a non-conflicting netmask must be given. Usually
0xffffffff is most appropriate.

IPFW + alias (Hammer)

Wed, 01 Jun 2011 02:44:07 GMT

>>>> ipfw nat 1 config ip ��.��.��.�� log
>>> log �� , � �� .
>> IPFIREWALL_VERBOSE_LIMIT=200 - �� :)
> �� . �� -�� :)
> �� ?

1 �� ?! :)
2 �ӣ �� . � �� .

IPFW + alias (PavelR)

Mon, 30 May 2011 16:06:22 GMT

> �� .
> �� arp-proxy � �� "-reject" ?

� �� :

>��, �ݣ.
>
>� �� .

;-)

IPFW + alias (universite)

Mon, 30 May 2011 16:02:02 GMT

> �� -�� -��
> � �� null-route.

�� .
�� arp-proxy � �� "-reject" ?

IPFW + alias (PavelR)

Mon, 30 May 2011 04:08:14 GMT

>> � �� ?
>> � �� proxy-arp �� .
>> �� 10.60.0.0/16 � �� -��-��.
> �� , �� ?
> � �� proxy-arp �� .
> �� -�� arp �� .

:-)

��:

�� , �� .
�� -��
�� , �� , ��
��

�� -�� :-)
�� , � �� .
� �� , �� -�� , � �� -��, �� .

�� -�� -��

IPFW + alias (universite)

Sun, 29 May 2011 18:44:34 GMT

> � �� ?
> � �� proxy-arp �� .
> �� 10.60.0.0/16 � �� -��-��.

�� , �� ?
� �� proxy-arp �� .
�� -�� arp �� .

� �� mpd �� proxy-arp, �� .
[code]
ng1: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1460
inet 10.0.1.1 --> 10.0.1.100 netmask 0xffffffff
inet6 fe80::2e0:4dff:fe7b:690c%ng1 prefixlen 64 scopeid 0xa
nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
ng2: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1460
inet 10.0.1.1 --> 10.0.1.202 netmask 0xffffffff
inet6 fe80::2e0:4dff:fe7b:690c%ng2 prefixlen 64 scopeid 0xb
nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
ng3: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1460
inet 10.0.1.1 --> 10.0.1.201 netmask 0x

IPFW + alias (PavelR)

Sun, 29 May 2011 18:32:53 GMT

>> �� "�� " � rc.conf:
>> route_bh1="-net 10.60.0.0/16 127.1 -reject"
>> �� 10.60.0.0/16 - �� ...
>> �� (�� , ��) ��
>> ��.
>> ��
>> �� .
> � �� -�� proxy-arp

� �� ?

� �� proxy-arp �� .
�� 10.60.0.0/16 � �� -��-��.

IPFW + alias (universite)

Sun, 29 May 2011 18:30:54 GMT

> �� "�� " � rc.conf:
> route_bh1="-net 10.60.0.0/16 127.1 -reject"
> �� 10.60.0.0/16 - �� ...
> �� (�� , ��) ��
> ��.
> ��
> �� .

� �� -�� proxy-arp