NAT works but port forwarding does not

Claudiu Dragalina-Paraipan dr.clau at gmail.com
Tue Dec 14 13:58:19 PST 2004


I think that NAT would not work either without
net.inet.ip.forwarding=1, so I assume it is already set to 1.
Can you access the webserver (192.168.1.54) from the FreeBSD gateway ?
What are the settings for em1 interface ?


On Tue, 14 Dec 2004 16:47:01 -0500, Paul J. Pathiakis
<pathiaki at pathiaki.com> wrote:
> Hi,
> 
>         just getting back into the networking side of things, but did you turn on packet
> forwarding? (it should be on if you turned on gateway enable <-I think)  Do a:
> sysctl -a | grep forward
> do you get a "1".
> 
>         I may be way off, but I am trying to help. :-)
> 
>         P.
> 
> 
> On Tuesday 14 December 2004 16:34, Zeno Lee wrote:
> > I am just starting off with PF.  I had it compiled into the kernel in 5.3
> > stable.  I have not setup any rules yet.  I'm just trying to set up NAT and
> > forwarding.
> >
> > My network setup
> >
> > Internet <----> em0 | FreeBSD | em1 <----->  LAN
> >
> >
> > my pf.conf file only has:
> >
> > ext_if="em0"
> > int_if="em1"
> > webserver="192.168.1.54"
> >
> > nat on $ext_if from $int_if:network to any -> ($ext_if)
> > rdr on $ext_if from any to any port 80 -> $webserver
> >
> >
> > NAT works, however, I cannot get port forwarding to work.  I am testing it
> > vial a remote  computer on the internet whose packets only come through em0.
> >
> > Am I missing anything here?
> > _______________________________________________
> > freebsd-pf at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> > To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"
> >
> _______________________________________________
> freebsd-pf at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"
> 


-- 
Claudiu Dragalina-Paraipan
e-mail: dr.clau at gmail.com


More information about the freebsd-pf mailing list