NAT problem

David DeSimone fox at verio.net
Thu Oct 18 23:40:47 PDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nicolas Salvo <nicolas.salvo at gmail.com> wrote:
>
> nat on $ext_if from $int_net to $proxy_bypass_needed port 80 -> $ext_if port 81
> 
> This was our best effort but we only changed the source port to 81,
> and we need to change the destination port.

Use "rdr" command instead of "nat".

The documentation talks around and around this without actually saying
it, but it is as simple as this:  "nat" modifies the source IP / port. 
"rdr" modifies the destination IP / port.

- -- 
David DeSimone == Network Admin == fox at verio.net
"This email message is intended for the use of the person to whom
 it has been sent, and may contain information that is confidential
 or legally protected.  If you are not the intended recipient or have
 received this message in error, you are not authorized to copy, dis-
 tribute, or otherwise use this message or its attachments.  Please
 notify the sender immediately by return e-mail and permanently delete
 this message and any attachments.  Verio, Inc. makes no warranty that
 this email is error or virus free.  Thank you."  --Lawyer Bot 6000
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFHGFFpFSrKRjX5eCoRAjwxAJ9EEW/rwqqJzaZ0HszUTbRGmzZv0QCgl+kb
HEwbLHv7Stli8/QzMCJetUg=
=gDac
-----END PGP SIGNATURE-----


More information about the freebsd-pf mailing list