rdr rules with pf
mszathmar at gmail.com
Sat Jun 14 00:50:14 UTC 2008
I'm trying to set up jails behind a NAT on my FreeBSD 7.0 box here as I've
only got one IP to play with. I'm currently using pf with the following
nat on $ext_if from $internal_net to any -> $external_addr
rdr on rl0 proto tcp from any to any port 5223 -> 192.168.222.2
pass in all
pass out all
The jail in question is sitting on 192.168.222.2 and is able to connect out.
The only problem I'm having is that the rdr statement doesn't seem to be
The examples I've been able to find so far encompass only situations in
which the box has more than one nic (see a lot of ext_if and int_if) and I
haven't been able
to find anything concrete.
The box is also running ipfw which I suspect may be causing some conflicts
... to bypass these, however, I've added rule 1 as "allow ip from any to
Can anyone point out my error? I realize that this question is probably
asked near constantly and there's probably some link I simply haven't
consulted yet and for that I apologize.
Thanks for your input!
More information about the freebsd-pf