pf/nat guru needed: fwd of packet to

Kristof Provost kristof at
Tue Oct 17 13:18:29 UTC 2017

On 16 Oct 2017, at 22:50, no at wrote:
> hi folks,
> short: anyone out there knows, how to redir & forward packets to
> preface: i need to get a crappy, stupid, very (!) wrong programmed 
> device
> running.
> and i know this crapdev violates RFCs, so this is the wrong story for 
> hints ;)
> the BSD box setup:
> freebsd 11.1, amd64.
> - interface "A":, MTU1500
> - interface "B":, MTU1500
> the (crapdev) source generates an ipv4 UDP packet as follows:
> - source address, port >1023
> - target hw addr: ff:ff:ff:ff:ff:ff
> - target ipv4 addr: port 4444
> - payload ~ 500 bytes, so it fits inside 1 packet.
I would not be surprised if that packet also has a TTL of 1.
In fact, I’d consider it a bug if it had a different value.

You could probably set a scrub rule to change it, so the packet can be 
forwarded, but I’d be very tempted to just run a proxy for this, 
rather than trying to fix it with pf.
It might even be possible to get the appropriate socat incantation to do 
it, so maybe you don’t even need to write any code for this.


More information about the freebsd-questions mailing list