carp and nat
ds at hacked.com.br
Tue Aug 1 15:05:28 UTC 2006
Your network layout would help in this but anyway.
The carp on the external interface should be used to the external router
know what firewall to send your incoming packets, and the carp on the
internal interface to the same thing on you LAN.
You can check with route(8) what interface is being used to route your
packets, so you will know what interface the nat should run on pf, in my
machines i have used the nat on the external interface, so as they are
the route to the external world, but this was on OpenBSD, it should be
the same on FreeBSD.
Rafael Aquino wrote:
> Hi there,
> I started to configure two firewall to work with carp+pfsync.
> I got everything done and working, but it seems thant I can't make
> nat on pf work properly.
> Just to know: does nat on pf work fine when using carp?
> Do I have to do the nat on the carp interface or on the physical
> Rafael Mentz Aquino
> BSDServer Ltda.
> 51 - 9847 8825
> freebsd-questions at freebsd.org mailing list
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions