Problem with NAT/RDR in PF

shinny knight sh1nny_kn1ght at
Mon Dec 10 02:44:32 PST 2007

Michael Smith <mksmith at> wrote:  
On Dec 9, 2007, at 3:34 PM, Erik Norgaard wrote:

> Michael Smith wrote:
>> Hello All:
>> I am trying to configure a round-robin group of Name Servers that 
>> respond on to and from a single address.
>> I want the following to occur:
>> 1) DNS query from to is redirected to a 
>> pool of name servers
>> 2) One of the name servers responds to the query
>> 3) The response shows a source address of, not the 
>> actual name server
> I know this does not answer your question, but, what's the point? 
> DNS isn't exactly the kind of task that knocks over a server. If you 
> want redundancy, then the correct way to do it is to add NS entries 
> to your zone files.
> I simply let my register transfer the zone file daily, works fine. 
> If you need to update the zone file regularly just reduce the max 
> age of the zone.

Hello Erik:

Well, aside from doing a *lot* of queries, it's nice to have a single 
IP address fronting a set of servers so I can pull one out for 
maintenance at any time and it doesn't affect name resolution for the 

freebsd-questions at mailing list
To unsubscribe, send any mail to freebsd-questions-unsubscribe at
  Hello Mike,
  If I understand correctly your environment I think you should change the NAT rule from:
  nat on $vlan821_if from $nr_net to $mail_net ->

  nat on $vlan6_if from $nr_net to $mail_net ->
  Let us know if this is solving the issue.

Looking for last minute shopping deals?  Find them fast with Yahoo! Search.

More information about the freebsd-questions mailing list