Date: Tue, 01 Aug 2006 12:05:14 -0300 From: Vinicius Vianna <ds@hacked.com.br> To: Rafael Aquino <freebsd@bsdserver.com.br>, freebsd-questions@freebsd.org Subject: Re: carp and nat Message-ID: <44CF6DAA.3070303@hacked.com.br> In-Reply-To: <20060801135326.M28129@bsdserver.com.br> References: <20060801135326.M28129@bsdserver.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, Your network layout would help in this but anyway. The carp on the external interface should be used to the external router know what firewall to send your incoming packets, and the carp on the internal interface to the same thing on you LAN. You can check with route(8) what interface is being used to route your packets, so you will know what interface the nat should run on pf, in my machines i have used the nat on the external interface, so as they are the route to the external world, but this was on OpenBSD, it should be the same on FreeBSD. HTH, Vinicius Rafael Aquino wrote: > Hi there, > > I started to configure two firewall to work with carp+pfsync. > > I got everything done and working, but it seems thant I can't make > nat on pf work properly. > > Just to know: does nat on pf work fine when using carp? > Do I have to do the nat on the carp interface or on the physical > interface? > > Thanks! > > -- > Rafael Mentz Aquino > BSDServer Ltda. > 51 - 9847 8825 > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44CF6DAA.3070303>