Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 28 Nov 2021 22:06:21 +0300
From:      =?UTF-8?B?w5Z6a2FuIEtJUklL?= <ozkan.kirik@gmail.com>
To:        freebsd-pf@freebsd.org
Subject:   Logging NAT translations and correlating nat & rule logs
Message-ID:  <CAAcX-AEJ-gc-FWdx_zKS7n8_=n7V98w2Sahvsvu9XLozZP949g@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Hi,

I'm trying to log NAT, BINAT, RDR translations. But the "nat log on
...." statement only logs the packets after translation is done. So
the information before translation is lost.
Is there a way to log the translation details ?

The other question: how can I correlate nat logs and rule logs for the
same packet?
Especially, when the pf configured as if-bound, 4 different log could
be generated for the same packet:
1st - Nat log on receive interface (in)
2nd - Rule log on receive interface (in)
3rd - Nat log on transmit interface (out)
4th - Rule log on transmit interface (out)

I'm looking for a common key for joining these 4 logs.

Thank you,
Have a nice day



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAAcX-AEJ-gc-FWdx_zKS7n8_=n7V98w2Sahvsvu9XLozZP949g>