From owner-freebsd-questions@FreeBSD.ORG Fri Feb 24 21:08:31 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BC9FC16A420 for ; Fri, 24 Feb 2006 21:08:31 +0000 (GMT) (envelope-from frankstaals@gmx.net) Received: from smtp2.versatel.nl (smtp2.versatel.nl [62.58.50.89]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0A0CF43D48 for ; Fri, 24 Feb 2006 21:08:30 +0000 (GMT) (envelope-from frankstaals@gmx.net) Received: (qmail 423 invoked by uid 0); 24 Feb 2006 21:08:28 -0000 Received: from ip176-173-59-62.adsl.versatel.nl (HELO [192.168.2.5]) ([62.59.173.176]) (envelope-sender ) by smtp2.versatel.nl (qmail-ldap-1.03) with SMTP for < >; 24 Feb 2006 21:08:28 -0000 Message-ID: <43FF75E0.3040409@gmx.net> Date: Fri, 24 Feb 2006 22:08:48 +0100 From: Frank Staals User-Agent: Mozilla Thunderbird 1.0.7 (X11/20060105) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Eric Schultz References: <43FF68DF.4050709@gmx.net> <43FF73C8.3050809@schultznet.ca> In-Reply-To: <43FF73C8.3050809@schultznet.ca> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: Redirecting Traffic with PF X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Feb 2006 21:08:31 -0000 Eric Schultz wrote: > Frank Staals wrote: > >> Hey, >> > Good afternoon... > > I'm just stabbing in the dark here since I use neither 5-Stable nor PF. > >> I have an FreeBSD server/firewall running 5-Stable with PF. I want to >> redirect all udp traffic on port 27902 from the internet to a >> computer in my network. I used this rule but I have some problem with >> it: sometimes connections on that port are refused and I can't >> connect with other players ( it's for a online game ) : >> > What do you mean by "sometimes" ??? "sometimes" problems are the > worst kind. Sometimes: about 90% of all attempts to connect > >> rdr on $extif inet proto udp from any port 27902 -> 192.168.2.11 port >> 27902 >> >> I think the problem might have something to do with the different >> network interfaces since the traffic is comming in on $extif and has >> to go to an computer connected to $intif ? And how can I do that ? >> Can I change it to: >> >> rdr on $extif inet proto udp from any port 27902 -> $intif >> 192.168.2.11 port 27902 >> > How are your two interfaces configured and what does your routing > table look like? If you do a traceroute to 192.168.2.11 from the > firewall when you're having trouble connecting what is the result? > The Firewall is the default gateway for my localnetwork, so 192.168.2.11 is directly connected to the server/firewall -- -Frank Staals