NAT and problem (maybe)

2006-05-26 Thread Tautvydas
Hello List, I have opbsd box (3.9). I need to make this box as a router. I have two network cards. One internal, and other external. External card has it's own ip address, let's say 1.2.3.4 (static). Internal card also has it's own static IP - 192.168.1.1 with dhcp server running on it. So I

Re: NAT and problem (maybe)

2006-05-26 Thread Alexander Belikov
T I have opbsd box (3.9). I need to make this box as a router. I have T two network cards. One internal, and other external. External card has T it's own ip address, let's say 1.2.3.4 (static). Internal card also T has it's own static IP - 192.168.1.1 with dhcp server running on it. T So I need

Re: NAT and problem (maybe)

2006-05-26 Thread Tautvydas
I don't know is it possible, but I added PASS statement to the rule and the rule now looks like: nat pass on vr0 inet from 192.168.1.0/24 to any - 1.2.3.4 Please, comment that (is it necessary or what?). Thanks. And thank you all for reading. On 5/26/06, Alexander Belikov [EMAIL PROTECTED]

Re: NAT and problem (maybe)

2006-05-26 Thread Michael Lechtermann
How about this? Btw. default options can be left out, makes the rules even simpler to write... Since you are scrubbing everything the same way, try too keep it simple, not sure if just scrub would work too, but try it. If not, scrub in and scrub out will work. fragment reassemble is default

Re: NAT and problem (maybe)

2006-05-26 Thread Tautvydas
I'll try that later in the evening. For now, I've just needed working NAT. And now it's working. Later there will be more rules, and every simpler rule will be important :) Thanks in advice. That NAT rule works for me. If thats not the complete pf.conf it would help to see the whole. For

Re: NAT and problem (maybe)

2006-05-26 Thread Peter N. M. Hansteen
Tautvydas [EMAIL PROTECTED] writes: It looks like internal network is working, but there is no routing between vr0 (external) and vr1 (internal) network cards. To me this sounds a bit like you have forgotten to enable gatewaying, ie # sysctl net.inet.ip.forwarding=1 -- Peter N. M. Hansteen,