so tailscale docs said if you dont want packets to cgnat range to be dropped, try the `ipPool` attr

tried that a year ago, still doesnt work

Configurar DNAT usando VIP y IPPools en un cortafuegos proyectoa.com/configurar-d...

Configurar NAT dinámico (Dynamic NAT o DNAT) usando VIP (Virtual IP) en un cortafuegos Fortigate. Ejemplo de uso y consulta de traslación de direcciones desde línea de comandos

#dnat #ippool #vip #fortigate #nat

ipfilter ippool: Flag deleted entries with "#" List deleted entries prefixed by "#". This is consistent with other ippool list functions. Fixes: 7531c434a593 MFC after: 1 week

Interest | Match | Feed

ipfilter ippool: Prefix deleted entries with "#" To maintain consistency with ippool list functions, prefix deleted entries with "#". MFC after: 1 week

Interest | Match | Feed

ipfilter/ippool: Dump a copy of ippool hash data in "new" format As with 7531c434a593, which dumped ippool table data in the "new" format, print hash data in the "new" format. MFC after: 1 week

Interest | Match | Feed

ipfilter/ippool: Dump a copy of ippool dstlist data in "new" format As with 7531c434a593, which dumped ippool table data in the "new" format, print dstlist data in the "new" format. MFC after: 1 week

Interest | Match | Feed

Cluster Explosion Project

​:neocat_dizzy:​

Well that was a pile of self-inflicted fun ​:neocat_floof_explode:​

* In the midst of working out that vpn link cilium decided it was time to look at the `ippool`
* thanks to a typo this caused an invalid pool range which invalidated the pool causing […]

ipf: Correct ippool.5 man page The file URL must be enclosed in quotes. MFC after: 3 days

http://cgit.freebsd.org/src/commit/?id=278a726eec5a49284df1f54a586be0fe0ce2e0cf

Event Attributes