Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Sep 2007 10:32:31 +0200
From:      peter@bsdly.net (Peter N. M. Hansteen)
To:        freebsd-questions@freebsd.org
Subject:   Re: PF & NAT, how to forward GRE?
Message-ID:  <87odfnchr4.fsf@thingy.datadok.no>
In-Reply-To: <200709271114.23434.fbsd.questions@rachie.is-a-geek.net> (Mel's message of "Thu, 27 Sep 2007 11:14:22 %2B0200")
References:  <200709271114.23434.fbsd.questions@rachie.is-a-geek.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Mel <fbsd.questions@rachie.is-a-geek.net> writes:

> I take it you mean gre(4), which defines two IP protocols. So your rules will 
> need to include proto gre or proto mobile to identify the traffic. Something 
> like:
> nat on $wan_if proto gre from $int_if:network to any -> ($wan_if)

and don't forget to include a matching pass rule.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87odfnchr4.fsf>