Date: Thu, 21 Oct 2004 18:38:12 +0200 From: Max Laier <max@love2party.net> To: freebsd-current@freebsd.org, rionda@gufi.org Subject: Re: Is PF nat broken? Message-ID: <200410211838.20297.max@love2party.net> In-Reply-To: <1098364825.16153.30.camel@kaiser.sig11.org> References: <1098364825.16153.30.camel@kaiser.sig11.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart15046940.ooo17Qs351 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Thursday 21 October 2004 15:20, Matteo Riondato wrote: > I switched from PPP -nat + IPFW to PF for nat and packet filtering. > It seems to me that nat does not work with pf: > This are my rules in /etc/pf.conf : > > ext_if =3D "tun0" > wifi_if =3D "rl0" > eth_if =3D "fxp1" > > wifi_net =3D "192.168.1.0/27" > eth_net =3D "192.168.0.0/29" > > [snip] > > nat on $ext_if from $wifi_net to any -> ($ext_if) > nat on $ext_if from $eth_net to any -> ($ext_if) > > [snip filtering rules] > > In rc.conf I have > gateway_enable=3D"YES" > ppp_enable=3D"YES" > ppp_mode=3D"ddial" > ppp_nat=3D"NO" > ppp_profile=3D"eth" > pf_enable=3D"YES" > pf_rules=3D"/etc/pf.conf" > [snip] > > Please note that I'm using pf.ko, not in-kernel support. > There isn't a "nat enable yes" line in /etc/ppp/ppp.conf > Any help will be appreciated. Well, could you try to tell us what exactly the problem is? I don't see any= =20 mentioning of the actual problem. To answer your question generally: No, PF nat is not borken. Not build into= =20 the kernel nor as a module. I am sure as I have it running. Please follow up with more details about your setup (tcpdump, pflog and pfc= tl=20 =2Dvsr considers helpful). You might also want to join freebsd-pf@ instead = of=20 freebsd-current@ to further discuss this. =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --nextPart15046940.ooo17Qs351 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQBBd+X8XyyEoT62BG0RAtFOAJ0ZDkdU/AUxrZj4Udb76xeYyC9eoACeJ7bD LdWTdvhern7B94Z8BexFUUs= =Gx5r -----END PGP SIGNATURE----- --nextPart15046940.ooo17Qs351--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200410211838.20297.max>