From nobody Tue Dec 28 10:18:09 2021
X-Original-To: freebsd-pf@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 907C41908BF2
	for <freebsd-pf@mlmmj.nyi.freebsd.org>; Tue, 28 Dec 2021 10:18:19 +0000 (UTC)
	(envelope-from franco@lastsummer.de)
Received: from host64.shmhost.net (host64.shmhost.net [IPv6:2a01:4f8:a0:51d3::107:1])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(Client did not present a certificate)
	by mx1.freebsd.org (Postfix) with ESMTPS id 4JNVqH313Lz3MXw
	for <freebsd-pf@freebsd.org>; Tue, 28 Dec 2021 10:18:19 +0000 (UTC)
	(envelope-from franco@lastsummer.de)
Received: from smtpclient.apple (unknown [IPv6:2a02:810a:f40:16ac:f042:f242:b48:d81])
	by host64.shmhost.net (Postfix) with ESMTPSA id 4JNVq63G67zNkVB;
	Tue, 28 Dec 2021 11:18:10 +0100 (CET)
Content-Type: text/plain;
	charset=utf-8
List-Id: Technical discussion and general questions about packet filter (pf) <freebsd-pf.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-pf
List-Help: <mailto:pf+help@freebsd.org>
List-Post: <mailto:pf@freebsd.org>
List-Subscribe: <mailto:pf+subscribe@freebsd.org>
List-Unsubscribe: <mailto:pf+unsubscribe@freebsd.org>
Sender: owner-freebsd-pf@freebsd.org
X-BeenThere: freebsd-pf@freebsd.org
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.120.0.1.13\))
Subject: Re: Logging NAT translations and correlating nat & rule logs
From: Franco Fichtner <franco@lastsummer.de>
In-Reply-To: <CAAcX-AG-3myNw2FTWe=yXE+can+Ye3mctbWfx86aMrGXFEvauw@mail.gmail.com>
Date: Tue, 28 Dec 2021 11:18:09 +0100
Cc: freebsd-pf@freebsd.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <5AB60713-21D3-4EFA-B054-2335DAB8FCC7@lastsummer.de>
References: <CAAcX-AEJ-gc-FWdx_zKS7n8_=n7V98w2Sahvsvu9XLozZP949g@mail.gmail.com>
 <C3DF6003-A39A-4C23-9AC5-076D44FC2404@lastsummer.de>
 <CAAcX-AHdUU47s3E4fitCxCWZ+hfDfi3fPjGq+5sQ7Ff859dKCA@mail.gmail.com>
 <CAAcX-AEnDwo7ZMfKoEm1BG6OM-7_uNDyJWSmOqeKMa=WwMx9=A@mail.gmail.com>
 <CAAcX-AG-3myNw2FTWe=yXE+can+Ye3mctbWfx86aMrGXFEvauw@mail.gmail.com>
To: =?utf-8?Q?=C3=96zkan_KIRIK?= <ozkan.kirik@gmail.com>
X-Mailer: Apple Mail (2.3654.120.0.1.13)
X-Virus-Scanned: clamav-milter 0.103.3 at host64.shmhost.net
X-Virus-Status: Clean
X-Rspamd-Queue-Id: 4JNVqH313Lz3MXw
X-Spamd-Bar: ----
Authentication-Results: mx1.freebsd.org;
	none
X-Spamd-Result: default: False [-4.00 / 15.00];
	 TAGGED_RCPT(0.00)[];
	 REPLY(-4.00)[]
X-ThisMailContainsUnwantedMimeParts: N


> On 28. Dec 2021, at 7:57 AM, =C3=96zkan KIRIK <ozkan.kirik@gmail.com> =
wrote:
>=20
> And also, rule number and subrulenr information is missing.

Have you tried to confirm that this wasn't already the case for
"rdr pass" combinations before?


Cheers,
Franco