Outgoing packets being sent via wrong interface

Kristof Provost kp at FreeBSD.org
Sat Nov 21 21:20:47 UTC 2015


On 2015-11-20 16:34:31 (+0100), Daniel Bilik <ddb at neosystem.org> wrote:
> On Fri, 20 Nov 2015 16:18:10 +0100
> Kristof Provost <kp at FreeBSD.org> wrote:
> 
> > Can you post your pf rules too?
> 
> Sure, pf.conf attached.
> 
Thanks. As a first guess, I think the origin of the problem might be
related to the double nat rule you've got.

nat on $ext_if proto udp from $switchboard to 188.x.y.0/24 -> $ext_addr static-port
nat on $ext_if from $int_net to any -> $ext_addr

Packets that hit the first rule would also match the second one.
In principle the last match should win and everything should be fine,
but NAT is handled differently from 'normal' rules, so perhaps there's a
bug there.

I don't have the time to dig into this right away. Could you create a PR
and cc me to it?

Thanks,
Kristof


More information about the freebsd-net mailing list