Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 19 Nov 2005 09:29:44 -0600
From:      "J.D. Bronson" <jbronson@wixb.com>
To:        freebsd-questions@freebsd.org
Subject:   pf + NAT loopback
Message-ID:  <6.2.5.6.2.20051119092404.00bfca48@wixb.com>

next in thread | raw e-mail | index | archive | help
I had all of this working with PPPoE + PF, but now i have a T-1
with several IPs all aliased off of the main.

pf is working fine....however, I now have lost NAT LOOPBACK.

What I need is a way to go from one LAN machine to the WAN and 
loopback to the other LAN machine.

Since this 'just works' with pppoe, how do I do it with pf?

simple pf.conf:

binat on $bge1 from 192.168.82.170 to any -> 67.x.x.1
binat on $bge1 from 192.168.82.171 to any -> 67.x.x.2
binat on $bge1 from 192.168.82.172 to any -> 67.x.x.3
binat on $bge1 from 192.168.82.173 to any -> 67.x.x.4
and so on.

I need to use 192.168.82.172 to go and connect to public
67.x.x.2

This results in an immediate connection refused. I see nothing in the 
pflog and I even tried pass out quick all.

So I dont think pf is technically blocking it -but....

Why do I need this? - I run 2 external DNS servers (with views) and 
as such NS2 needs to talk to NS1 but using the WAN NAT loopbacks.

Help?





--
J.D. Bronson
Information Services
Aurora Health Care - Milwaukee, Wisconsin
Office: 414.978.8282 // Fax: 414.977.5299

-Taco Bell is *not* the Mexican Telephone Company-





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6.2.5.6.2.20051119092404.00bfca48>