From owner-freebsd-pf@FreeBSD.ORG Mon Aug 6 03:10:18 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6BF4616A41A for ; Mon, 6 Aug 2007 03:10:18 +0000 (UTC) (envelope-from reza@mra.co.id) Received: from mx3.mra.co.id (fw.mra.co.id [202.57.14.4]) by mx1.freebsd.org (Postfix) with ESMTP id B4CB913C458 for ; Mon, 6 Aug 2007 03:10:17 +0000 (UTC) (envelope-from reza@mra.co.id) Received: from localhost (localhost.mra.co.id [127.0.0.1]) by mx3.mra.co.id (Postfix) with ESMTP id 9127E30FB0 for ; Mon, 6 Aug 2007 09:50:05 +0700 (WIT) Received: from mx3.mra.co.id ([127.0.0.1]) by localhost (mx3.mra.co.id [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25837-01 for ; Mon, 6 Aug 2007 09:50:05 +0700 (WIT) Received: from [172.16.13.228] (unknown [172.16.13.228]) by mx3.mra.co.id (Postfix) with ESMTP id 45A3930F9B for ; Mon, 6 Aug 2007 09:50:05 +0700 (WIT) From: MUhammad Reza To: freebsd-pf@freebsd.org Content-Type: text/plain Date: Mon, 06 Aug 2007 09:42:03 +0700 Message-Id: <1186368123.4982.8.camel@localhost> Mime-Version: 1.0 X-Mailer: Evolution 2.6.1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at mra.co.id Subject: binat rules X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2007 03:10:18 -0000 Dear all I have problem to setup binat rule's on virtual interface's on pf. the goal is to establishes a one to one mapping between an internal IP address and an external addres. this my partial configuration of rc.conf and pf.conf rc.conf : ifconfig_bge2="inet 202.157.x.1 netmask 255.255.255.224" ifconfig_bge2_alias0="inet 202.157.x.2 netmask 255.255.255.255" pf.conf : nat on bge2 from 172.16.0.0/16 to any -> 202.157.x.1 binat on bge2 from 172.16.0.25 to any -> 202.157.x.2 When this rule's apply, host 172.16.0.25 could not connect to internet. Is there something wrong with my configuration ? please enlight me. regards Reza