From owner-freebsd-questions@FreeBSD.ORG  Thu Jul 29 20:57:41 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 5ADDC16A4CE; Thu, 29 Jul 2004 20:57:41 +0000 (GMT)
Received: from slacknet.slacknet.com (slacknet.slacknet.com [204.228.135.180])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 10CAB43D41; Thu, 29 Jul 2004 20:57:41 +0000 (GMT)
	(envelope-from rj45@slacknet.com)
Received: from rj45 (helo=localhost)
	by slacknet.slacknet.com with local-esmtp (Exim 4.32 #1 (Debian))
	id 1BqHy7-0002LE-P3; Thu, 29 Jul 2004 14:57:39 -0600
Date: Thu, 29 Jul 2004 14:57:39 -0600 (MDT)
From: RJ45 <rj45@slacknet.com>
To: freebsd-questions@freebsd.org
Message-ID: <Pine.LNX.4.21.0407291453080.8760-100000@slacknet.slacknet.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-SA-Exim-Scanned: No (on slacknet.slacknet.com);
	SAEximRunCond expanded to false
cc: mlaier@freebsd.org
Subject: problems with PF
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Jul 2004 20:57:41 -0000


hello,
I configured PF for natting machines on my LAN
using FreeBSD as ADSL gateway.

I just write a simple rule
nat on tun0 from 172.16.16.0/24 to any -> (tun0)

but NAT does not work, packets are blocked.

ip forwarding is enabled

using ipfilter works and packets are natted succesfully with a simple rule
the same as before:

map tun0 172.16.16.0/24 -> tun0/32


I am using PF on OpenBSD since the first time it was released
so I Am sure it is not a problem of my configuration (After all more
than very simple)
using PF on FreeBSD I noticed simply packets are not NATted.
I have to say I am using it on sparc64 FreeBSD 5.2.1 on ultra 60.

anyone has some hints ?

maybe on i386 works who knows ?

thanks

Rick