From owner-freebsd-pf@FreeBSD.ORG Mon Aug 6 03:10:31 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 409CA16A418 for ; Mon, 6 Aug 2007 03:10:31 +0000 (UTC) (envelope-from beastie@mra.co.id) Received: from mx3.mra.co.id (fw.mra.co.id [202.57.14.4]) by mx1.freebsd.org (Postfix) with ESMTP id B8D7513C459 for ; Mon, 6 Aug 2007 03:10:17 +0000 (UTC) (envelope-from beastie@mra.co.id) Received: from localhost (localhost.mra.co.id [127.0.0.1]) by mx3.mra.co.id (Postfix) with ESMTP id 60E6C30F83 for ; Mon, 6 Aug 2007 09:57:22 +0700 (WIT) Received: from mx3.mra.co.id ([127.0.0.1]) by localhost (mx3.mra.co.id [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25792-03 for ; Mon, 6 Aug 2007 09:57:22 +0700 (WIT) Received: from mail.mra.co.id (unknown [172.16.0.224]) by mx3.mra.co.id (Postfix) with ESMTP id 2A09230F81 for ; Mon, 6 Aug 2007 09:57:22 +0700 (WIT) Received: from [172.16.13.228] (unknown [172.16.13.228]) by mail.mra.co.id (Postfix) with ESMTP id 5801868C8997 for ; Mon, 6 Aug 2007 10:00:09 +0700 (WIT) From: ^Beastie^ To: freebsd-pf@freebsd.org Content-Type: text/plain Date: Mon, 06 Aug 2007 09:49:19 +0700 Message-Id: <1186368559.4982.12.camel@localhost> Mime-Version: 1.0 X-Mailer: Evolution 2.6.1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at mra.co.id Subject: binat rules X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2007 03:10:31 -0000 Dear all I have problem to setup binat rule's on virtual interface's on pf. the goal is to establishes a one to one mapping between an internal IP address and an external addres. this my partial configuration of rc.conf and pf.conf rc.conf : ifconfig_bge2="inet 202.157.x.1 netmask 255.255.255.224" ifconfig_bge2_alias0="inet 202.157.x.2 netmask 255.255.255.255" pf.conf : nat on bge2 from 172.16.0.0/16 to any -> 202.157.x.1 binat on bge2 from 172.16.0.25 to any -> 202.157.x.2 When this rule's apply, host 172.16.0.25 could not connect to internet. Is there something wrong with my configuration ? please enlight me. regards Reza