Hi; My knowledge of PF has grown a tad but, despite whatever I may or may-not have learned, NAT still does not seem to be functioning and my internal lan computers cannot access the internet. The NAT rule is as such: pfctl -sn nat on rl0 inet from 192.168.0.0/24 to 192.168.0.1 -> 64.142.102.8 The computers on my workgroup are receiving dynamic addresses from rl1, an ethernet card in my OpenBSD box. Ip fowarding is enabled in /etc/sysctl.conf and pf=YES in /etc/rc.conf I greatly appreciate any help in resolving this issue. If any further details are required to diagnose the problem, please contact me by email at BradenM@sonomacomputer.com Thank you; Bray
Here is what mine reads: nat on fxp0 inet from 192.168.0.0/24 to any -> 69.254.129.192 [demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a name of jlindsey.11442DEFANGED-vcf]
Everyone; Thank you for the quick response. I reviewed the messages and used the advice from all posts to develop a solution that has solved my lack of internet problem. Thank you; Bray
Looks bit odd to me. Are you sure you only want to nat for that
address? The corresponding output on my home gateway is
nat on xl0 inet from 192.168.103.0/24 to any -> (xl0) round-robin static-port
which is the result of this pf.conf line:
nat on $ext_if from $int_if:network to any -> ($ext_if) static-port
The next thing to check, of course if you have the necessary
corresponding pass rules (NAT by itself does not pass)
--
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
"First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.Try: nat on rl0 inet from 192.168.0.0/24 to any -> 64.142.102.8 -ME
Please post your full pf.conf :-) kind regards Siju
| Rafael J. Wysocki | 2.6.28-rc3-git6: Reported regressions from 2.6.27 |
| Rafael J. Wysocki | [Bug #11207] VolanoMark regression with 2.6.27-rc1 |
| Matthew Wilcox | [PATCH] Fix boot-time hang on G31/G33 PC |
| Greg KH | [GIT PATCH] driver core patches against 2.6.24 |
git: | |
| Jon Smirl | ! [rejected] master -> master (non-fast forward) |
| Jon Smirl | Packfile can't be mapped |
| Sverre Rabbelier | Git vs Monotone |
| Shawn O. Pearce | libgit2 - a true git library |
| Richard Stallman | Real men don't attack straw men |
| GVG GVG | ssh_exchange_identification: Connection closed by remote host |
| Douglas A. Tutty | OBSD's perspective on SELinux |
| Girish Venkatachalam | Ethernet jumbo frames? |
| Volker Armin Hemmann | build error with 2.6.27.6+reiser4+ehci-hub patch. ERROR: "mii_ethtool_gset" [drive... |
| Michael Grollman | Re: 8169 Intermittent ifup Failure Issue With RTL8102E Chipset in Intel's New D945... |
| Evgeniy Polyakov | [resend take 2 0/4] Distributed storage. |
| Krzysztof Halasa | Re: [PATCH v2] Re: WAN: new PPP code for generic HDLC |
| serial driver xmit problem | 21 minutes ago | Linux kernel |
| Why Windows is better than Linux | 21 minutes ago | Linux general |
| How can I see my kernel messages in vt12? | 7 hours ago | Linux kernel |
| Grub | 18 hours ago | Linux general |
| vmalloc_fault handling in x86_64 | 1 day ago | Linux kernel |
| epoll_wait()ing on epoll FD | 1 day ago | Linux kernel |
| Framebuffer in x86_64 causes problems to multiseat | 1 day ago | Linux kernel |
| Difference between 2.4 and 2.6 regarding thread creation | 1 day ago | Linux general |
| Netfilter kernel module | 1 day ago | Linux kernel |
| Compiling gfs2 on kernel 2.6.27 | 1 day ago | Linux kernel |
