From owner-freebsd-pf@FreeBSD.ORG  Tue Jan 18 12:50:32 2005
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 91FF816A4CE
	for <freebsd-pf@freebsd.org>; Tue, 18 Jan 2005 12:50:32 +0000 (GMT)
Received: from moutng.kundenserver.de (moutng.kundenserver.de
	[212.227.126.188])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1DCFB43D1F
	for <freebsd-pf@freebsd.org>; Tue, 18 Jan 2005 12:50:32 +0000 (GMT)
	(envelope-from max@love2party.net)
Received: from [212.227.126.155] (helo=mrelayng.kundenserver.de)
	by moutng.kundenserver.de with esmtp (Exim 3.35 #1)
	id 1CqsoY-0003yt-00; Tue, 18 Jan 2005 13:50:30 +0100
Received: from [217.227.152.169] (helo=donor.laier.local)
	by mrelayng.kundenserver.de with asmtp (TLSv1:RC4-MD5:128)
	(Exim 3.35 #1)
	id 1CqsoY-0004CS-00; Tue, 18 Jan 2005 13:50:30 +0100
From: Max Laier <max@love2party.net>
To: freebsd-pf@freebsd.org
Date: Tue, 18 Jan 2005 13:50:13 +0100
User-Agent: KMail/1.7.2
References: <86k6qcynus.fsf@srvbsdnanssv.interne.kisoft-services.com>
	<86r7kj3x2b.fsf@srvbsdnanssv.interne.kisoft-services.com>
	<86ekgi9avj.fsf@srvbsdnanssv.interne.kisoft-services.com>
In-Reply-To: <86ekgi9avj.fsf@srvbsdnanssv.interne.kisoft-services.com>
MIME-Version: 1.0
Content-Type: multipart/signed;
  boundary="nextPart2295971.Ipr9692xHU";
  protocol="application/pgp-signature";
  micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
Message-Id: <200501181350.21488.max@love2party.net>
X-Provags-ID: kundenserver.de abuse@kundenserver.de
	auth:61c499deaeeba3ba5be80f48ecc83056
Subject: Re: pf & clonable devices
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical discussion and general questions about packet filter (pf)
	<freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Jan 2005 12:50:32 -0000

--nextPart2295971.Ipr9692xHU
Content-Type: text/plain;
  charset="iso-8859-15"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Tuesday 18 January 2005 13:31, Eric Masson wrote:
> >>>>> "Eric" =3D=3D Eric Masson <e-masson@kisoft-services.com> writes:
>
> Followup to myself.
>
> A refinement in the problem description :
> Trafic from the host where pf runs flows fine, but I need to issue a
> pfctl -F all -f /etc/pf.conf to make traffic from/to hosts on the
> network.

Okay, that hints that the NAT-rule is to blame.  Can you check the output o=
f=20
"$pfctl -vvsn" after a reconnect, but before issuing a ruleset reload?  Thi=
s=20
looks a bit like PR kern/69954, in which case you might want to try to writ=
e=20
your nat-rule as:

nat on $ext_if from $int_if:network to any -> ($ext_if:0)

Please let me know if that helps and - if not - send in the output of -vvsn.

Thanks.

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart2295971.Ipr9692xHU
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQBB7QYNXyyEoT62BG0RAmhXAJ9/wiVJBerG4tv2yx74vaF4eLiPAwCeMaTJ
jYxmSt+cwJB0TBR+37CACPM=
=Z9aQ
-----END PGP SIGNATURE-----

--nextPart2295971.Ipr9692xHU--