Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 31 Mar 2013 10:37:29 +0430
From:      s m <sam.gh1986@gmail.com>
To:        freebsd-pf@freebsd.org
Subject:   how access inside from outside when nat is done from inside to outside
Message-ID:  <CAA_1SgGN7h9d8Rzbuwqa-2HrgwJffrqrfOdzjAqDNbBhkvehPA@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
hello guys

i am newbie in pf and nat and have some problem with it.

  i want to nat inside traffic to outside and when i ping outside from
inside, every thing is ok and nat is done perfectly. but when i ping inside
from outside, request packets are sent without any nat translation while
reply packets are anted and therefore outside system can not recognize
reply packets and do not accept them. this is example pf packets which are
received in a outside system when pings an inside system.

request packets:   src:192.168.2.1----> dst: 192.168.1.1
reply packets:       src: 192.168.2.50----> dst:192.168.2.1

is it a correct behavior or not? and if it is correct, it means that when i
configure to nat traffic from inside to outside, i can not access from
outside to inside systems? (in cisco router we can do it).

please let me know if i am misunderstanding.
thanks



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAA_1SgGN7h9d8Rzbuwqa-2HrgwJffrqrfOdzjAqDNbBhkvehPA>