From owner-freebsd-net@FreeBSD.ORG  Thu Mar  9 13:44:19 2006
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@FreeBSD.org
Delivered-To: freebsd-net@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 58BC716A422
	for <freebsd-net@FreeBSD.org>; Thu,  9 Mar 2006 13:44:19 +0000 (GMT)
	(envelope-from tiagocruz@b4br.net)
Received: from vader.b4br.net (vader.b4br.net [200.152.202.11])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8B9F243D45
	for <freebsd-net@FreeBSD.org>; Thu,  9 Mar 2006 13:44:17 +0000 (GMT)
	(envelope-from tiagocruz@b4br.net)
Received: from localhost (localhost.b4br.net [127.0.0.1])
	by vader.b4br.net (Postfix) with ESMTP id 068BA18175D
	for <freebsd-net@FreeBSD.org>; Thu,  9 Mar 2006 10:43:24 -0300 (BRT)
Received: from vader.b4br.net ([127.0.0.1])
	by localhost (vader.b4br.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 60205-08 for <freebsd-net@FreeBSD.org>;
	Thu,  9 Mar 2006 10:43:23 -0300 (BRT)
Received: from tuxkiller.matter.b4br.net (yoda.b4br.net [200.152.202.10])
	by vader.b4br.net (Postfix) with ESMTP id CA875181477
	for <freebsd-net@FreeBSD.org>; Thu,  9 Mar 2006 10:43:23 -0300 (BRT)
From: Tiago Cruz <tiagocruz@b4br.net>
To: "freebsd-net@FreeBSD.org" <freebsd-net@FreeBSD.org>
In-Reply-To: <1141657294.25455.38.camel@localhost.localdomain>
References: <1138387362.4742.9.camel@localhost.localdomain>
	<43DA6C6A.7050701@elischer.org>
	<1138390041.4742.19.camel@localhost.localdomain>
	<43DA8E70.2070804@elischer.org>
	<1138621574.18130.26.camel@localhost.localdomain>
	<43DE6030.4090702@elischer.org> <20060131123042.GA74812@uk.tiscali.com>
	<1138713557.25466.4.camel@localhost.localdomain>
	<43DFCBBC.7000206@elischer.org> <20060201134633.GB78696@uk.tiscali.com>
	<1141657294.25455.38.camel@localhost.localdomain>
Content-Type: text/plain
Date: Thu, 09 Mar 2006 10:44:14 -0300
Message-Id: <1141911854.11450.28.camel@localhost.localdomain>
Mime-Version: 1.0
X-Mailer: Evolution 2.4.2.1 
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: amavisd-new at b4br.net
Cc: 
Subject: Re: Network client is the same from server (solution)
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Mar 2006 13:44:19 -0000

Some months after, I'm here back to say the solution:

I did this in my default gateway master (192.168.0.0/22) with CARP
(firewall fail over):

Firewall Rules:
==============
vpn2 = "tun0"
...
set loginterface $vpn2
...
binat on $vpn2 from 192.168.0.0/22 to any -> 192.168.8.0/22
...
pass in  on $vpn from any to any keep state
pass out on $vpn from any to any keep state

Client: Windows XP (192.168.0.0/24) with OpenVPN (10.5.0.0/24):

SO, the client need to ping the host 192.168.8.32 to get reply from
192.168.0.8.

Is working now :-)

Logs:
54. 224700 rule 26/0(match): pass in on tun0: 10.5.0.6 > 192.168.0.32:
ICMP echo request, id 1024, seq 13568, length 40

Thank you,
Hope that help somebody.

-- 
Tiago Cruz
http://linuxrapido.org