[pf4freebsd] Re: Version 1.52

Max Laier max at love2party.net
Wed Sep 15 20:39:38 PDT 2004


I see a little contrast here:

> ===[root] /boot/kernel # pfctl -sa
> scrub in all fragment reassemble
> pass quick on lo0 all
> nat on fxp0 inet from 172.16.4.1 to any -> 172.16.4.11

> ===[root] /usr/local/etc # cat pf.conf
[...]
> nat on $ext_if from 172.16.5.1 to any -> 172.16.4.11

Are your sure that you did load the ruleset you are cat'ing? As you see,
pfctl tells you that it will "nat ... from 172.16.4.1 ..." that is a point
of interest! What is your LAN-Layout (i.e. in what way are 172.16.5.1,
172.16.4.11 and your external gateway connected) ? Is default route and
netmask correct on all boxes involved?

We will get thisone working! So please look at the issue with xxx4.1 vs.
xxx5.1 and maybe paste output of "netstat -rn" and "ifconfig -a" of
172.16.5.1 and 172.16.4.11 as well.

Thank you very much for your feedback, I really hope that we can settle this
problem soon
    Max





More information about the freebsd-pf mailing list