Article View: bit.listserv.openbsd-pf
Article #86Re: nat-to and route-to specified in a single rule
From: Stuart Henderson
Date: Tue, 07 Jun 2011 17:13
Date: Tue, 07 Jun 2011 17:13
9 lines
1356 bytes
1356 bytes
On 2011/06/07 17:36, Rob Sessink wrote: > You’re right, looking again at this rule, it is unwanted to do > the NAT on the inbound packets of the internal interface when the > firewall is connected to multiple networks/interfaces. > > Thanks for the pointer to pf.conf(5). But what is meant with the > statement a ‘local IP address’ in this context?. An address on the local machine.
Technical Details
Message-ID:
<20110607164813.GW216@symphytum.spacehopper.org>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrnReferences:
<5A7F701214D1B0498A66980564DF31230B89C52C@tbg-vms.tbg.lan> <4DEE15E2.7060900@bobi.gateit.net> <5A7F701214D1B0498A66980564DF31230B8D37F8@tbg-vms.tbg.lan>Show Full Headers
Complete Article Headers
X-Google-Thread: ff4ef,4e0555ec631c7476 X-Google-NewGroupId: yes X-Google-Attributes: gidbffa70e3,domainid0,public,usenet X-Google-Language: ENGLISH,UTF8 Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn From: stu@spacehopper.org (Stuart Henderson) Newsgroups: bit.listserv.openbsd-pf Subject: Re: nat-to and route-to specified in a single rule Date: 7 Jun 2011 10:13:18 -0700 Organization: None Lines: 10 Message-ID: <20110607164813.GW216@symphytum.spacehopper.org> References: <5A7F701214D1B0498A66980564DF31230B89C52C@tbg-vms.tbg.lan> <4DEE15E2.7060900@bobi.gateit.net> <5A7F701214D1B0498A66980564DF31230B8D37F8@tbg-vms.tbg.lan> NNTP-Posting-Host: localhost.newsguy.com Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit NNTP-Posting-Date: 7 Jun 2011 17:13:18 GMT