Project

General

Profile

Actions

Feature #737

closed

Make 1:1 NAT Reflection's NAT rule generation work for more setups

Added by Erik Fonnesbeck almost 14 years ago. Updated about 12 years ago.

Status:
Resolved
Priority:
Normal
Category:
Rules / NAT
Target version:
-
Start date:
07/13/2010
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

On the interface traffic is being redirected to, currently 1:1 NAT Reflection only generates NAT rules for the subnet configured on the interface. It should generate a rule for the actual destination subnet instead.

Actions #1

Updated by Ermal Luçi over 13 years ago

  • Target version deleted (2.0)
Actions #2

Updated by Erik Fonnesbeck over 13 years ago

  • Tracker changed from Todo to Feature
  • Target version set to 2.0

Looking back at this, I didn't really write up a very good description of it. Anyway, it should work for a wider range of cases now than it previously did.

Actions #3

Updated by Erik Fonnesbeck over 13 years ago

  • Status changed from New to Feedback
Actions #4

Updated by Ermal Luçi over 13 years ago

This thing is wrong because it slows down filter reload and things depends on it being snappy.

There is not justafication on doing this during filter reload so please revert.

Actions #5

Updated by Chris Buechler over 12 years ago

  • Target version deleted (2.0)
Actions #6

Updated by Erik Fonnesbeck about 12 years ago

  • Status changed from Feedback to Resolved

Closing this since it works and the part being objected to was already indirectly there by the call to guess_interface_from_ip that used to be there (the code added was a modified version of the guess_interface_from_ip code). Opened #2240 for the removal of the routing table usage.

Actions

Also available in: Atom PDF