Re: [pilax@pilax.com: Libnet Freebsd and nat]

From: Jose Nazario <jose(at)monkey.org>
Date: Tue Nov 19 2002 - 21:34:23 EST

On Tue, 19 Nov 2002, mike schiffman wrote:

> But with Freebsd the spoofed ip source address is ALWAYS nat'ed with the

you should be able to tune the NAT parametrs to list what networks you want to NAT. in PF it's basically:

        map tun0 192.168.1.0/24 -> 20.20.20.1/32

just don't spoof from your internal network and you should be able to spoof all you want without the NAT process rewriting the return address.

---

jose nazario, ph.d.			jose@monkey.org
					
http://www.monkey.org/~jose/


---------------------------------------------------------------------

To unsubscribe, e-mail: libnet-unsubscribe@securityfocus.com For additional commands, e-mail: libnet-help@securityfocus.com Received on Tue Nov 19 21:34:43 2002