Re: New Translation Options in PF

2009-09-06 Thread Stuart Henderson
On 2009-09-05, Scott McEachern sc...@erratic.ca wrote: Anathae Townsend wrote: match out on external from mynetwork to any nat-to (external) round-robin Should round-robin be showing up in the rule? Remove the parentheses on external and it will use the first IP assigned to external

New Translation Options in PF

2009-09-05 Thread Anathae Townsend
My OpenBSD 4.6 current firewall is currently designed to service three internal networks, 192.168.0.0/24, 192.168.1.0/24, 192.168.2.0/24. I have assigned the group external to my connection to my isp. Using the following, I'm able to have internal connections to use network address translation

Re: New Translation Options in PF

2009-09-05 Thread Jussi Peltola
On Sat, Sep 05, 2009 at 05:37:58AM -0600, Anathae Townsend wrote: match out on external from mynetwork to any nat-to (external) round-robin IIRC it's been that way as long as I can remember, if you only have one address round-robin doesn't really do anything. -- Jussi Peltola

Re: New Translation Options in PF

2009-09-05 Thread Scott McEachern
Anathae Townsend wrote: match out on external from mynetwork to any nat-to (external) round-robin Should round-robin be showing up in the rule? Remove the parentheses on external and it will use the first IP assigned to external and not use round-robin. -- - RSM http://www.erratic.ca