Weird Problem with NAT

[Max Laier]

On Friday 21 September 2007, Washington Odhiambo wrote:
> Hello people,
>
> I have a box which I'd like to do some port forwarding to two boxes on
> my internal LAN.
>
> I have reduced my pf.conf to just the following:
>
> # define macros for each network interface
> extif = "em0"
> intif = "xl0"
> server = "192.168.0.2"
> exch_svr = "192.168.0.26"
>
> services="{ 80, 110, 443, 53 }"
> exchange_svcs="{ 3000 }"
>
> rdr pass on $extif inet proto tcp to port $services -> $server
> rdr pass on $extif inet proto tcp to port $exchange_svcs -> $exch_svr
> port 80 rdr pass on $extif inet proto { tcp, udp } to port $services ->
> $server
>
>
> Well, this server's external IP is 212.22.160.35, if anyone is
> interested.
>
> I have been trying whole day to get "telnet 212.22.160.35 110" to
> work, but it wouldn't.

From where?

> From the server, I can connect to 192.168.0.2 port 110 without a 
> problem. 
>
> I am stuck at the moment.
>
> What am I missing?
>
> FreeBSD 6.2-STABLE here.

The dumps you sent in the other mail are pretty useless.  What is required 
is a dump from the internal interface and/or from the destination router 
itself.

Are you sure you got the routing right on all boxes?  Do you have 
net.inet.ip.forwarding enabled?  Where are you trying from?

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part.
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20070921/4484bf6c/attachment.pgp