From owner-freebsd-current@FreeBSD.ORG  Thu Oct 21 13:28:28 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F210C16A4CE
	for <freebsd-current@freebsd.org>;
	Thu, 21 Oct 2004 13:28:28 +0000 (GMT)
Received: from gunfright.epcdirect.co.uk (gunfright.epcdirect.co.uk
	[195.10.242.32])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4A3F243D53
	for <freebsd-current@freebsd.org>;
	Thu, 21 Oct 2004 13:28:28 +0000 (GMT)
	(envelope-from bsd-current@epcdirect.co.uk)
Received: from lfarr (l-farr.int.epcdirect.co.uk [192.168.6.200])
	by gunfright.epcdirect.co.uk (Postfix) with ESMTP id 51F8868A7A;
	Thu, 21 Oct 2004 14:28:27 +0100 (BST)
From: "Lawrence Farr" <bsd-current@epcdirect.co.uk>
To: <rionda@gufi.org>, <freebsd-current@freebsd.org>
Date: Thu, 21 Oct 2004 14:28:25 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
In-Reply-To: <1098364825.16153.30.camel@kaiser.sig11.org>
Thread-Index: AcS3cNywQPgLq76uS9OyFiAgKd9K0AAALDRA
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Message-Id: <20041021132827.51F8868A7A@gunfright.epcdirect.co.uk>
Subject: RE: Is PF nat broken?
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Oct 2004 13:28:29 -0000


> -----Original Message-----
> From: owner-freebsd-current@freebsd.org 
> [mailto:owner-freebsd-current@freebsd.org] On Behalf Of 
> Matteo Riondato
> Sent: 21 October 2004 14:20
> To: freebsd-current@freebsd.org
> Subject: Is PF nat broken?
> 
> I switched from PPP -nat + IPFW to PF for nat and packet filtering.
> It seems to me that nat does not work with pf:
> This are my rules in /etc/pf.conf :
> 
> ext_if = "tun0"
> wifi_if = "rl0"
> eth_if = "fxp1"
> 
> wifi_net = "192.168.1.0/27"
> eth_net = "192.168.0.0/29"
> 
> [snip]
> 
> nat on $ext_if from $wifi_net to any -> ($ext_if)
> nat on $ext_if from $eth_net to any -> ($ext_if)
> 
> [snip filtering rules]
> 
> In rc.conf I have
> gateway_enable="YES"
> ppp_enable="YES"
> ppp_mode="ddial"
> ppp_nat="NO"
> ppp_profile="eth"
> pf_enable="YES"
> pf_rules="/etc/pf.conf"
> [snip]
> 
> Please note that I'm using pf.ko, not in-kernel support.
> There isn't a "nat enable yes" line in /etc/ppp/ppp.conf
> Any help will be appreciated.
> 
> Best Regards
> -- 
> Rionda aka Matteo Riondato
> GUFI Staff Member (http://www.gufi.org)
> FreeSBIE Developer (http://www.freesbie.org)
> BSD-FAQ-it Main Developer (http://utenti.gufi.org/~rionda)
> Sent from: kaiser.sig11.org running FreeBSD-6.0-CURRENT


Works for me with 

        nat on $ext_if from $internal_net to any -> ($ext_if)

On a PPP dial up, ($ext_if=tun0) I think you may need to remove the 
nat enable from PPP and try again. 

Lawrence Farr
EPC Direct Limited