Date: Thu, 21 Oct 2004 14:28:25 +0100 From: "Lawrence Farr" <bsd-current@epcdirect.co.uk> To: <rionda@gufi.org>, <freebsd-current@freebsd.org> Subject: RE: Is PF nat broken? Message-ID: <20041021132827.51F8868A7A@gunfright.epcdirect.co.uk> In-Reply-To: <1098364825.16153.30.camel@kaiser.sig11.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> -----Original Message----- > From: owner-freebsd-current@freebsd.org > [mailto:owner-freebsd-current@freebsd.org] On Behalf Of > Matteo Riondato > Sent: 21 October 2004 14:20 > To: freebsd-current@freebsd.org > Subject: Is PF nat broken? > > I switched from PPP -nat + IPFW to PF for nat and packet filtering. > It seems to me that nat does not work with pf: > This are my rules in /etc/pf.conf : > > ext_if = "tun0" > wifi_if = "rl0" > eth_if = "fxp1" > > wifi_net = "192.168.1.0/27" > eth_net = "192.168.0.0/29" > > [snip] > > nat on $ext_if from $wifi_net to any -> ($ext_if) > nat on $ext_if from $eth_net to any -> ($ext_if) > > [snip filtering rules] > > In rc.conf I have > gateway_enable="YES" > ppp_enable="YES" > ppp_mode="ddial" > ppp_nat="NO" > ppp_profile="eth" > pf_enable="YES" > pf_rules="/etc/pf.conf" > [snip] > > Please note that I'm using pf.ko, not in-kernel support. > There isn't a "nat enable yes" line in /etc/ppp/ppp.conf > Any help will be appreciated. > > Best Regards > -- > Rionda aka Matteo Riondato > GUFI Staff Member (http://www.gufi.org) > FreeSBIE Developer (http://www.freesbie.org) > BSD-FAQ-it Main Developer (http://utenti.gufi.org/~rionda) > Sent from: kaiser.sig11.org running FreeBSD-6.0-CURRENT Works for me with nat on $ext_if from $internal_net to any -> ($ext_if) On a PPP dial up, ($ext_if=tun0) I think you may need to remove the nat enable from PPP and try again. Lawrence Farr EPC Direct Limited
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041021132827.51F8868A7A>