PF & NAT, how to forward GRE?

Peter N. M. Hansteen peter at bsdly.net
Fri Sep 28 01:32:37 PDT 2007


Mel <fbsd.questions at rachie.is-a-geek.net> writes:

> I take it you mean gre(4), which defines two IP protocols. So your rules will 
> need to include proto gre or proto mobile to identify the traffic. Something 
> like:
> nat on $wan_if proto gre from $int_if:network to any -> ($wan_if)

and don't forget to include a matching pass rule.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.


More information about the freebsd-questions mailing list