log nat connections source address

Géczi Szabolcs csirki at mail.tiszanet.hu
Tue Jun 12 14:41:04 UTC 2007


hi,

i'd like to log nat connections with pflog. I tag the nat connections 
packets and log tagged packets but I can't log the source address of 
connections.
in the log there are the external interface address and the destinations 
address only.

nat on $ext_if from $internal_net to any tag natted -> {public ip}
pass out quick log on $ext_if  keep state tagged natted

part of the log:

16:00:08.384847 IP publicip.62642 > www.mifene.hu.http: S 
4030616034:4030616034(0) win 65535 <mss 1460,nop,nop,sackOK>

what should I do?

thx

sz 



More information about the freebsd-pf mailing list