Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Is pfSense keeping track about ip:port usages when using multiple private LAN's?

    NAT
    3
    3
    491
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      chiel last edited by

      Hello,

      I have got a pfSense box which has 10 private IP LAN networks. I use NAT to get these 10 private networks on the Internet. I don't use a single public IP address but a IP pool of public addresses, a /29 to be exact. I use the same IP pool for all 10 private LAN networks. I was just wondering if pfSense keeps track of the usage between the various NAT states between the NAT tables when using the same shared pool? For example, is pfSense keeping track that there is a entry using a public IP and port ip.ip.ip.ip:portso that it will not use the same for an other NAT table?

      I'm asking because normaly a state table is build using <private ip:port="">and <public ip:port="">. When multiple networks use the same public IP it need to check only the <public ip:port="">.

      regards</public></public></private></ip.ip.ip.ip:port>

      1 Reply Last reply Reply Quote 0
      • Derelict
        Derelict LAYER 8 Netgate last edited by

        I don't think anyone has any idea what you're asking. You might want to clarify.

        1 Reply Last reply Reply Quote 0
        • K
          kpa last edited by

          There's only one state table and every single packet that is possible to filter gets compared to entries in that table. There are no separate NAT or filter rule tables by interface either, they are all global and rule matching uses the interface information in addition to the IP header information.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy