[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Can't get pf rdr to work.



> I'm building a firewall/router from OpenBSD 3.0-current, and I'm using
> the new pf for filtering and NAT.
> 
> I can't get the rdr statement to work right in /etc/nat.conf.

I figured it out.  My error was, I had a default route on the internal
box that pointed at the old firewall.  So incoming ssh packets reached
the internal box, but when it tried to reply, the old firewall dropped
the packets.

-- 
Bob Miller                              K<bob>
kbobsoft software consulting
http://kbobsoft.com                     kbob_(_at_)_jogger-egg_(_dot_)_com