From owner-freebsd-pf@FreeBSD.ORG Sat Jul 17 22:04:36 2010 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9D15E106564A for ; Sat, 17 Jul 2010 22:04:36 +0000 (UTC) (envelope-from thomas.elsgaard@gmail.com) Received: from mail-fx0-f54.google.com (mail-fx0-f54.google.com [209.85.161.54]) by mx1.freebsd.org (Postfix) with ESMTP id 315178FC0C for ; Sat, 17 Jul 2010 22:04:35 +0000 (UTC) Received: by fxm13 with SMTP id 13so1813882fxm.13 for ; Sat, 17 Jul 2010 15:04:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=xPCPQlUKo1Dl8BvTSOdTxgQ633CQyxef5weQdyCq6+4=; b=dtOi5kajxg1WYRSNKUs3p+X9OjPgxgxsnt/2bFG2adGdLgdsliXXVy5QZiDrknAz29 mamCil3eRMZ54GEqkI05MVvgvMuvwZ0BJqFrATS5M210iBS7vYXGfKTNOdpC8pzH0Jk/ SqwJxOQgZaOVzH1oL+nvv4UO4yVk44u98a4aw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=wnbAnqRbJG9GN9dVXNSyOjS4UfAuJQbgGS6ou8K9jqR91g8gA69Z/t3viZDtZKH2PK e5jRmKCx0y/WINls64zVEUkIkQvQjjEKmpME90R1SDFLJe6zHwMIajGjT4sxg+YrT2h+ hfEoW80swqT1Dh4FpE+GcPM9yLXoyUU67MJD4= MIME-Version: 1.0 Received: by 10.239.146.210 with SMTP id x18mr45628hba.112.1279402867993; Sat, 17 Jul 2010 14:41:07 -0700 (PDT) Received: by 10.239.154.196 with HTTP; Sat, 17 Jul 2010 14:41:07 -0700 (PDT) Date: Sat, 17 Jul 2010 19:41:07 -0200 Message-ID: From: Thomas Elsgaard To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: How to do PAT based on source IP network and port ? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Jul 2010 22:04:36 -0000 Hi I am wondering how i can get pf to do a PAT based on source IP network? Traffic from 10.5.1.0/24 towards UDP port 69 should be mapped to port 20000 instead of port 69 Traffic from 10.5.2.0/24 towards UDP port 69 should be mapped to port 20001 instead of port 69 Traffic is accessing a service on the same server where pf is running. Is this possible with pf? Thomas